Hacker News new | ask | show | jobs
by visarga 3262 days ago
If you know the md5 hash, why not login with another password that generates the same hash value? Does it actually need to be the same passord?
3 comments

It will work but a common reason to crack passwords is because people use the same password on multiple sites. Getting the wrong value may work to log into that specific site but will not work where the user the real password elsewhere. (unless that other place is using the same hash algorithm)
Yes, that will also work, hence why rainbow tables don't need to contain more entries than the possible set of hashes.
That's called a collision