

2.2 million users' cards are reportedly in the database


Sony wrote:







In his blog he adds:







Comments     Threshold


By MozeeToby on 4/29/2011 12:36:49 PM , Rating: 3
I gave an example last time this came up, but what primes when multiplied together and modded by 2^32 (Modded, if anyone doesn't know, means divide by and keep the remainder. 13 modded by 10 = 3) primes produce 1738643815? You can't just go up the list of prime numbers and divide, because you're missing the most significant digits. You have to try every possible combination until you find one that works.

Yes, yes, you can make a rainbow table; if you have the storage space you only need to do the calculations once. Even if we allow only for the first 100 primes, that still produces 9 * 10^157 rows for your DB, good luck with that.

Even if you find an answer, which isn't going to be easy, you have no guarantee that the answer you found was actually my password because the hash is non-unique. So long as everyone salts their hashes with a different salt (doesn't even have to be regularly randomized), the password that they find is useless for accessing other sites, even if the user uses that password everywhere.

By karielash on 4/29/2011 7:42:59 PM , Rating: 1

You don't have a clue.

