Bitcoin Forum
May 29, 2024, 12:47:07 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: [1]
1  Other / Beginners & Help / Re: Unlocking XFX HD-695X-ZNFC 6950 1GB (non-reference design) on: June 30, 2011, 05:37:48 PM
With under clocking memory, i get about 325mh/s at 80c or so running non-stop...until microsoft decides to patch windows.
2  Economy / Services / Re: Spendbitcoins.com on: June 30, 2011, 03:58:21 PM
I just cashed in and got a $300 gift card to amazon from spendbitcoins.  Very painless!  I received the gift card email within 3 hours!

Thank you for running such an awesome service!
3  Other / Beginners & Help / Re: WTB Google+ invite on: June 29, 2011, 06:28:29 PM
Limiting the amount of people that can use it by making it invite only is stupid. They did that with wave and look how that went. A social network is just that. Social. What's the point in a "revolutionary new network" if none of your friends are on it because they didnt get invites?

Ever hear of facebook?  it was limited to schools for a long time.  Didn't seem to hurt it's popularity.
4  Other / Beginners & Help / Re: Mt Gox just emailed me saying there are 8 claim requests on my account. on: June 24, 2011, 04:29:32 PM
And conversely, all 4 of the 14 char passwords were also variants of username/email address/domain.  Same with both 13 char passwords.

I'd wager most of the 2500 or so passwords cracked were variants of the email/username/domain.  I think there is a pretty important lesson there.

Namely, don't trust sites that "encrypt" your password with MD5 or anything similar? Don't trust sites that do not understand the fundamentals of encryption?

Read this. Bear in mind that the $2000 CUDA systems he's referring to are the same sorts of systems that are described in the BTC mining threads.

Then consider how much having a "strong" password, by any definition of "strong" you'd like, would save you under those circumstances.

Even if they used 4096 bit encryption, if your email address is awesomedude@vanitydomain.com, and your password is 4w3s0m3dud3v4n1tyd0m41n, it will take any semi-intelligent cracking system (like john) a few minutes to guess.  A 23 char password will be impossible to brute force, but if it is a variant on your name, there is a good chance to crack it in minutes rather than the expected lifetime of the sun.
5  Other / Beginners & Help / Re: Who do you side with - Kevin or Mt Gox? on: June 24, 2011, 04:15:47 PM
mtgox had no procedures/safe guards in place to stop this sort of thing from stopping a fire sale, nor did they delay the transfer of newly purchased coins.  Because of this, I'm on the Kevin side of this issue.
6  Other / Beginners & Help / Re: Mt Gox just emailed me saying there are 8 claim requests on my account. on: June 24, 2011, 05:21:31 AM
And conversely, all 4 of the 14 char passwords were also variants of username/email address/domain.  Same with both 13 char passwords.

I'd wager most of the 2500 or so passwords cracked were variants of the email/username/domain.  I think there is a pretty important lesson there.
7  Other / Beginners & Help / Re: Mt Gox just emailed me saying there are 8 claim requests on my account. on: June 24, 2011, 05:14:01 AM
By the way, did you check the file for your account info?  Did your password hash start with $1$?

$1$ doesn't help. FreeBSD MD5 doesn't protect weak passwords.
With a simple dictionary attack, I cracked more than 500 passwords in one blow.
Total amount of cracked passwords I got so far are now over 2000.

What is the longest so far?

When the csv was released I was interested in what kind of passwords people used for 'financial' institutions.  This is what I got:

$ for i in `cat .john/john.pot | cut -d : -f 2` ; do echo ${#i} ; done | sort | uniq -c
     98 10
     36 11
     46 12
      4 13
      4 14
      5 15
      1 4
    111 5
    864 6
    454 7
    640 8
    182 9


5 15 char passwords.

Nice.  How about the longest including at least one digit?

There were 3 at 15, all of them were variants of their email address and/or username (or combination)
8  Other / Beginners & Help / Re: Mt Gox just emailed me saying there are 8 claim requests on my account. on: June 24, 2011, 05:05:35 AM
By the way, did you check the file for your account info?  Did your password hash start with $1$?

$1$ doesn't help. FreeBSD MD5 doesn't protect weak passwords.
With a simple dictionary attack, I cracked more than 500 passwords in one blow.
Total amount of cracked passwords I got so far are now over 2000.

What is the longest so far?

When the csv was released I was interested in what kind of passwords people used for 'financial' institutions.  This is what I got:

$ for i in `cat .john/john.pot | cut -d : -f 2` ; do echo ${#i} ; done | sort | uniq -c
     98 10
     36 11
     46 12
      4 13
      4 14
      5 15
      1 4
    111 5
    864 6
    454 7
    640 8
    182 9


5 15 char passwords.
9  Other / Beginners & Help / Re: BEST 2 cards to get for between 400 -500 on: June 24, 2011, 03:12:15 AM
I did the math not too long ago for this.  Some conservative numbers:

3x5830 (@ $109/e): 750mh/s
2x6950 (@ $209/e): 660mh/s
1x6990 (@ $700/e): 700mh/s

To me, the sweet spot was 5830s for price per mh/s, but I ultimately got a 5830 and a 6950 for my two computers.
10  Other / Beginners & Help / Re: Hardcore libertarians: explain your anti-IP-rights position to me. on: June 24, 2011, 12:20:02 AM
imho, Larence Lessig's 'Free Culture' is a good listen if you're interested in the subject:  http://randomfoo.net/oscon/2002/lessig/

Personally, I like IP-Rights in the short term, but the current copyright system goes way too far.  Age+70 I think it is?
11  Other / Beginners & Help / Re: Anyone had a fire !?!? on: June 23, 2011, 11:56:56 PM
Not a fire, but I updated Catalyst drivers while mining.  I wasn't paying attention and noticed after a few minutes, "Hey, my fan sure is quie....oh crap!".  My GPU was up to 105c.  MSI Afterburner was unresponsive to changing fan settings.  I stopped my miner and rebooted and all was well again.  I'll admit I did panic a bit.  Luckily the card is still rock solid for me.
12  Other / Beginners & Help / Re: Introduce yourself :) on: June 23, 2011, 06:23:34 AM
Hi!  I'm rob.  I've been mining for almost 2 weeks now.  I mostly lurk and ready just about everything in the economics/marketplace section.  I have a few coins saved up and I'm looking for unique things to buy with it.

yay for bitcoins.
Pages: [1]
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!