news.volyx.in

Ken Thompson's Unix Password (leahneukirchen.org)

2101 points by stargrave · 2564 days ago · 637 comments on HN

Article summary

The article discusses the author's attempt to crack the Unix password of Ken Thompson, one of the creators of Unix, using the DES-based crypt(3) algorithm. The password was eventually cracked by Nigel Williams, revealing a chess move in descriptive notation. The article highlights the weakness of the crypt(3) algorithm and the ease of cracking passwords from the early days of Unix. The password was cracked using a modern GPU and the hashcat tool.

Main themes

  • Unix history
  • Password security
  • Crypt(3) algorithm
  • Chess notation
  • Computer security

What commenters say

  • Using a complex password with lots of upper/lower case and symbols is no longer considered the best practice for password security.
  • The early days of Unix and mainframes often had lax password security, with some systems not even requiring passwords.
  • The debate between open systems and closed systems that protect privacy and data is still ongoing, with no clear solution.
  • Cracking a password, even with modern hardware, can still take a significant amount of time if the password is well-chosen.
  • Some argue that the future of security will not involve passwords, while others believe that passwords will continue to be necessary.
  • The use of descriptive notation, such as chess moves, can make for a secure and memorable password.
  • The security of a system is only as strong as its weakest link, and physical access to a machine can often bypass password security.
  • Password cracking techniques have become increasingly sophisticated, and can often crack passwords that were once considered secure.