from Hacker News

AI cracks 51% of passwords in 1min

by lambersley on 8/9/23, 7:30 PM with 7 comments

• by fallingfrog on 8/10/23, 3:17 AM

  I definitely get the sense it’s not running its actual AI against what you type, but rather just counting the number of characters and comparing it to the chart below, which is of debatable accuracy.

• by baldr333 on 8/9/23, 8:02 PM

  A AI password cracker ? How is this different then a brute force attack ?

• by abrookewood on 8/10/23, 4:25 AM

  Hmmm ... surely this is just statistical analysis sprinkled with magical marketing fairy dust: "[this] uses Generative Adversarial Network (GAN) to autonomously learn the distribution of real passwords from actual password leaks ... After training, GAN was able to leverage the acquired knowledge to create new sample passwords that follow the neural network distribution"

• by uglycoyote on 8/10/23, 1:58 PM

  hmmm.. they don't seem to really explain the rules of the game here. Doesn't the length of time it takes to crack a password depend on the rate at which you are allowed to try different guesses at the password prompt, and whether or not you get locked out or penalized with delays after a certain number of wrong guesses?

  When they say it takes 48 minutes to "crack" my password are they assuming some specific rate at whichever the system they are trying to log in to responds to failed login attempts?

• by m-p-3 on 8/10/23, 3:29 AM

  All good, a derivative of my master password for my Bitwarden vault doesn't even completely fit in there and gives 7.23B years.