RE: Offline Attack on Steem User Credentials by cryptogee

View this thread on: hive.blog | peakd.com | ecency.com

steem · @cryptogee · Jul 20 '16

$0.08

Very interesting, so is this just a problem with user-generated passwords?

Thanks
*CG*

`author`	cryptogee
`permlink`	re-robinhood-offline-attack-on-steem-user-credentials-20160720t001003519z
`category`	steem
`json_metadata`	{"tags":["steem"]}
`created`	2016-07-20 00:10:06
`last_update`	2016-07-20 00:10:06
`depth`	1
`children`	3
`last_payout`	2016-08-23 13:10:57
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.076 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	87
`author_reputation`	419,387,439,147,428
`root_title`	"Offline Attack on Steem User Credentials"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	203,842
`net_rshares`	67,102,256,013
`author_curate_reward`	""

voter	weight	wgt%	rshares	pct	time
ihash	0 B		26,324,658,063	100%
jason	0 B		40,777,597,950	100%

$0.68

I dug into the code for the "suggest password" option Steem provides at signup and as far as I could tell the logic there was 100% kosher.

👍 cass

`author`	robinhood
`permlink`	re-cryptogee-re-robinhood-offline-attack-on-steem-user-credentials-20160720t001847000z
`category`	steem
`json_metadata`	{"tags":["steem"]}
`created`	2016-07-20 00:18:48
`last_update`	2016-07-20 00:18:48
`depth`	2
`children`	2
`last_payout`	2016-08-23 13:10:57
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.510 HBD
`curator_payout_value`	0.167 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	138
`author_reputation`	2,618,720,866,038
`root_title`	"Offline Attack on Steem User Credentials"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	204,033
`net_rshares`	352,268,673,794
`author_curate_reward`	""

voter	weight	wgt%	rshares	pct	time
cass	0 B		352,268,673,794	100%

what does that mean? Was it good?

`author`	liondani
`permlink`	re-robinhood-re-cryptogee-re-robinhood-offline-attack-on-steem-user-credentials-20160720t012502032z
`category`	steem
`json_metadata`	{"tags":["steem"]}
`created`	2016-07-20 01:25:03
`last_update`	2016-07-20 01:25:03
`depth`	3
`children`	1
`last_payout`	2016-08-23 13:10:57
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	33
`author_reputation`	95,095,146,236,111
`root_title`	"Offline Attack on Steem User Credentials"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	205,501
`net_rshares`	0

Yes.  

100% kosher  =  Good