AcroMace
01-29-2009, 02:45 AM
Alright first of all, I'm not asking anyone to hack an account for me or offering to hack one for them...
I'm just learning about hashes, and how they work.
I know that Hotmail never really stores the plaintext passwords, but encrypts them into hashes.
If you click "Save my User ID and Password" while logging into Hotmail,
then it saves the information as cookies on your computer,
and I'm guessing that the encrypted hash is saved somewhere in the file.
One of the reasons I'm pretty sure it's saved on it is because that sidejacking works,
and I'm going to guess everyone that's not going to spam on this thread knows what that means.
Then wouldn't it be theoretically possible for someone to hack into your computer,
transfer than log in cookie to their computer,
then use some hash crackers to get a shot at the hash and get the password?
I mean, with the extremely fast speed of those rainbow tables, I'm pretty sure it wouldn't even take that long to crack the password.
Can anyone tell me the flaw of this theory which I'm not understanding?
I'm just learning about hashes, and how they work.
I know that Hotmail never really stores the plaintext passwords, but encrypts them into hashes.
If you click "Save my User ID and Password" while logging into Hotmail,
then it saves the information as cookies on your computer,
and I'm guessing that the encrypted hash is saved somewhere in the file.
One of the reasons I'm pretty sure it's saved on it is because that sidejacking works,
and I'm going to guess everyone that's not going to spam on this thread knows what that means.
Then wouldn't it be theoretically possible for someone to hack into your computer,
transfer than log in cookie to their computer,
then use some hash crackers to get a shot at the hash and get the password?
I mean, with the extremely fast speed of those rainbow tables, I'm pretty sure it wouldn't even take that long to crack the password.
Can anyone tell me the flaw of this theory which I'm not understanding?