Hacker News new | ask | show | jobs
by epoxy 5655 days ago
Is there an easy way for me to decrypt what password Gawker had for me? I was unable to login with my account for over a year, but I'd like to see what password they have on file for me so I know whether I need to change it elsewhere.

I realize asking this also is asking for an instruction manual for malice with whatever is decrypted. I just don't know how to determine how exposed my email address leaves me.

1 comments

If you have the database dump from Gawker, you can search for either your associated Email address, or the username they had on record. Extract that line from the file, put it in a new text file and run John The Ripper[1] on it: "./john mypassword.txt". On consumer hardware, it may take a while, but you'll eventually get it. My 2 year old 2.00GHz iMac took about 36 hours to crack my password.

If you'd like, email me and I can try to retrieve your password hash based on your email address. My email is in my profile.