New answers tagged

1

Knowing part of the password gives you a good start at building a list of possible passwords, but that could be a massive list depending on the max length and charset. Say it's a max of 50 chars and you have 14, that leaves 36 chars worth of entropy in the unknown range. By knowing part of the hash you can invalidate a lot of those, but without the whole ...


1

Considering that I am reading your question correctly you know the first section of an SHA1 hash and then the characters in plain text after the hash. To successfully pull off this attack you would need to write a script that guesses passwords as Password1! + randombytes# and hashing the full combo with SHA1 and then checking to ensure the beginning of the ...


-1

Besides the normal Philip Dick kind of paranoia which tells you nothing is as it seems -- ever -- there is nothing that can be inferred from simply seeing that Chrome has alerted you to a site's using SHA-1 for their certificate's signature. Google said they were going to do this back in 2014. You could be on Amazon.com, using Chrome. The fact is, if ...



Top 50 recent answers are included