Shulou(Shulou.com)11/24 Report--

CTOnews.com, December 30 (Xinhua) the security incident that occurred in LastPass in November this year continues to ferment. After security experts raised 14:00 questions about the official announcement, competitor 1Password joined in the debacle.

The LastPass announcement said it would take millions of years to crack a user's master password, after security experts questioned that it would take only two months to crack a regular user's master password. Now competitor 1Password has broken down again, saying that it costs only $100 to crack the regular master password.

Jeffrey Goldberg, chief security architect at 1Password, said in a blog post that the content mentioned in the LastPass announcement greatly exaggerated the difficulty of cracking, and that if you really wanted to crack the master password of a regular LastPass customer, it would cost about $100.

CTOnews.com learned that the reason Goldberg supports this view is that most users' real-life master passwords are not random, and they know this for password crackers. It is obviously much easier to crack passwords that are only in English and numbers (such as Fido8my2Sox), but it will take a long time to crack "2b | | 2b.titq" and "zm-@MvY7*7eL". But the average user will not use such a complex and difficult to remember password as the master password.

Most passwords can be cracked with less than 10 billion guesses and can be cracked for about $100, he said.

More details can be found at "Not in a million years: It can take far less to crack a LastPass password"

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.