Friday, November 1, 2013

Can someone be targeted using the Adobe breach?

Note: As a professional courtesy to those at Adobe who are doing their absolute best to mitigate this breach, I have partially redacted all full hashes and email addresses from this blogpost, besides those found in the image published by arstechnica.com.

We all know about the recent 153 Million account dump from Adobe. As arstechnica showed, the format looks something like this:

Image source: http://arstechnica.com/security/2013/11/how-an-epic-blunder-by-adobe-could-strengthen-hand-of-password-crackers/

As you can see, there's some sort of ID number, the email address, the encrypted password (which from the arstechnica article we now know is 3des) and the password hint.

Password hints are great and all, but they can be unreliable, unclear, or flat out wrong.
HOWEVER, when you have thousands of people using the same password (same encrypted string) looking at all of those password hints together can make the cleartext password painfully obvious.
For example. Let's get the most common encrypted password strings from the dump (with numbers on the left showing how many times they were used):

1911867 EQ7fIp*****=
 446144 j9p+********************==
 345833 L8qbAD**********CatHBw==
 211659 BB4e6X+b*************w==
 201569 j9p*****2ws=
 124248 dQ*****PYvQ=
 113880 7*****Veq8I=
  83409 PMDTbP**********FUvYGA==


Now let's take that first, most common password string, and go get all the users' hints who used that same password. Let's also uniq those and sort them by how popular that actual hint is:


One can reasonable guess what password corrisponds with EQ7fIp******=

Now let's see what else we can do with this. Let's use this same method to see if we can target an individual account in the Adobe dump. Funny enough, there's an entry for an account edwardsnowden@******mail.com.
6**58***-|--|-edwardsnowden@******mail.com-|-B***************CatHBw==-|-|--


Now let's see if any other people in the dump have the exact same password hash as this account, and if so then how many.
[jdustin@localhost passwords]$ grep B***************CatHBw==  cred | wc -l


Okay, let's grab those 207 the lines containing all accounts who used that same password, cut out just their password hints, and then sort them by how often that hint is in the list:
[jdustin@localhost passwords]$ grep B***************CatHBw==  cred | cut -d"|" -f5 | sort | uniq -c | sort -nr | head -n50


So, Metal? 74W on the table of elements? The usual Tung?
"tungsten" perhaps? Your guess is as good as mine. :)




62 comments:

  1. This comment has been removed by the author.

    ReplyDelete
  2. Where did you download the file?

    ReplyDelete
  3. I was discussing this last week in the context of password reuse. I did a bit of "research" and found that of the brute forced pws from the dump many are used across major sites. Password reuse is a real problem and people don't appreciate the implications.

    ReplyDelete
  4. Hey ,
    I will try it and discuss it in our Community of graphic designers .password reuse is a biggest problem but the people..............

    ReplyDelete
  5. I enjoyed the tips you are providing on your website. Adobe support can make one’s help technical service. Thanks for the information……..
    Adobe Support please visit the link.

    Thankyou
    Lacy Brown

    ReplyDelete
  6. I am very happy to see your blog, good article and interesting,

    *reach your marketing lists or Sales Leads*

    Email Appending list is continuously updated with most accurate, quality and verified contacts.

    Ehealthcarelists can provide Adobe Users

    Email
    complete marketing information such as

    · First Name, Last Name
    · Business Name
    · Practice Specialty, Specialty Code
    · Email, Postal Address and Zip Code
    · SIC /NAICS Code and NPI Numbers.
    · Phone Number and Fax Number
    · License Number
    · Web address

    Thanks for the information and Greetings

    ReplyDelete
  7. I am glad to see this post which I was finding. It is incredible post. The personal statement length are available here for those who are thinking about to draw the graph.

    ReplyDelete
  8. Collections from the design labels such as pas cher trx and other beauty are released after every six months.
    With every new launch, a new penny skateboards cheap online technology is developed.
    This had led to making TRX For Sale remain competitive in the International market.
    The entire pas cher trx packaging process is paid into detail to enhance the collections quality and appearance.
    Now everyone can own high-end designer trx france.
    TRX Suspension Training Sale being one of the largest and most prominent fashion company in the world, it has an obligation of beating the standards set by others.
    The fashion world, with a higher concentration on Discount TRX Sale, needs to provide the best packaging services that the modern world has ever seen.
    TRX Suspension Training On Sale plays a major role in creating a brand name that fashion lovers want to identify with.

    ReplyDelete
  9. Support for adobe +1877-339-8403. Our highly knowledgeable Adobe technical support online staff is readily available at all times for our well- regarded clients to help out with their Adobe issues at the earliest possible time.

    ReplyDelete
  10. TollFree +1(855)837-9965! Repair All PC, LLC in Cleveland Ohio. Our Microsoft certified professionals & System Engineers which provide Best Tools and Expert Solutions to all you issues on repairallpc.net

    ReplyDelete
  11. such agreat blog,nicely explained thanks to shared this blog about email list Email Appending | B2b Email Appending

    ReplyDelete
  12. Great blog! I really love how it is easy on my eyes and the information are well written. I am wondering how I might be notified whenever a new post has been made. I have subscribed to your feed which really should do the trick! Have a nice day! We provide you online help and support.Call us at Our Adobe Customer Care Number UK0800-098-8579.

    ReplyDelete
  13. Really i appreciate the effort you made to share the knowledge. The topic here i found was really effective to the topic which i was researching for a long time. Adobe Contact Number UK

    ReplyDelete
  14. You can get touch with us by dialing our Adobe Helpline Number UK@0800-098-8312 for any technical problem. We provide you solutions for resolving problems shortly or related issues.

    ReplyDelete
  15. great article about email appending appreciate the way presents of blogs and words.nice job!

    Email Appending Services

    ReplyDelete
  16. Great blog! I really love how it is easy on my eyes and the information are well written. I am wondering how I might be notified whenever a new post has been made. I have subscribed to your feed which really should do the trick! Have a nice day! We provide you online help and support.Call us at Our Adobe customer care number 0800-098-8579.

    ReplyDelete
  17. Thank you very much! Your blog is always full of great idea. They are really helpful
    Adobe Helpline Number +1-844-442-0111
    Adobe Customer Number

    ReplyDelete
  18. This was really an amazing blog to read. Thanks for sharing it with us and keep on sharing information like this. For any type of other information regarding Adobe get connected with us at Adobe Support Number UK.

    ReplyDelete
  19. This research is practically done by you and gives good ideas. visit here some useful content here

    Adobe contact help Number US +1-844-442-0111
    Adobe support helpline Number USA

    ReplyDelete
  20. This comment has been removed by the author.

    ReplyDelete
  21. This comment has been removed by the author.

    ReplyDelete
  22. Best Blog for Information about of "Hotmail Account" & Thanks for sharing with me. This blog is very helpful. If Any Hotmail users have got some technical error in our Mail Account so don't worry quick consult at toll free @08000988343 Hotmail contact number UK and get resolution for all these error.

    ReplyDelete
  23. Thanks for sharing nice information with us. I like your post and all you share with us is up to date and quite informative.
    Get help for Dell printer technical support.
    Dell Printer Contact Number UK
    Dell Printer Support Number UK

    ReplyDelete
  24. Thank you very much! Your blog is always full of great idea. They are really helpful
    Adobe Customer care Number

    ReplyDelete
  25. Hotmail Helpline Number UK
    If you facing this problem while using the account and the best way to resolve this problem is to contact the technicians at 08000903883 toll-free number.
    Hotmail Customer care Number UK

    ReplyDelete
  26. This comment has been removed by the author.

    ReplyDelete
  27. Hello, I really like your post and i am glad that you shared this useful info with us.
    Contact Hotmail Helpline Number For UK and tech expert suggestion.

    ReplyDelete
  28. Best Blog for Information about of "Hotmail Account" & Thanks for sharing with me. This blog is very helpful. If Any Hotmail users have got some technical error in our Mail Account so don't worry quick consult at toll free @08081013524 Hotmail phone number UK and get resolution for all these error.

    ReplyDelete
  29. Very Nice post. I liked the way you explained it clearly like I saw in Automation Associates LLC. Thanks for sharing.

    ReplyDelete
  30. Very Nice Post. I congratulate with your blog. Thanks for sharing. You can also publish this excellent post on other platforms such as, Wordpress, Blogspot followed by Livejournal, Medium and Tumblr

    ReplyDelete
  31. Amazing and excellent post. Thanks for sharing this awesome data. You can also share these kind of post in different social medias such as, Facebook, the famous Twitter and in the LinkedIn profiles followed by Google Plus and the infographic site Pinterest.

    ReplyDelete
  32. Excellent and amazing post. Worth the time. You can also share these post in different social medias to get a higher ground like Facebook, the famous Twitter and in the LinkedIn profiles followed by Google Plus and the Infographic Site Pinterest.

    ReplyDelete
  33. Beautiful post I've come across today. Informative. Thanks for sharing this most excellent information. You can share this information on other platforms such as, Wordpress the most useful Blogspot site followed by the famous Tumblr and also in Medium lastly in the Live Journal site.

    ReplyDelete
  34. Great post, and I am glad that you shared this useful info with us. This blog is very helpful. You can also share this Information on many other sites for example like Free Samples 411, a clean business site like OS Business Opportunities swiftly followed by Jfissures and Asaimjapan and also the Johny Adams site.

    ReplyDelete
  35. This comment has been removed by the author.

    ReplyDelete
  36. Hi, Wonderful blog. I really like this. Get in touch with the tech expert any time you require resolution for your Microsoft tech issue by just one call at Microsoft Contact Number UK instantly.

    ReplyDelete
  37. Thanks for sharing this informative nice article and good work
    nba2k14 crack
    tally torrent download

    ReplyDelete
  38. Highly effective hackers have very unique habits that set them apart from other hackers. Therefore, any young professional hacker should adhere to the outlined habits if they want to be specialists and gurus in their profession. I will be recommending this site to our clients who are majorly students accessing our US English Essay Writing Help.

    ReplyDelete
  39. This research is practically done by you and gives good ideas. visit here some useful content here
    McAfee Support Number UK 0800-756-3354

    ReplyDelete
  40. Accomplishing your daily works with the help of Adobe Application on your computer, but technical issue are still found in during its use, so you must talk to the technical experts at 0800-090-3220 to get an accurate solution. Adobe Helpline Number UK

    ReplyDelete
  41. I have been thinking of how I can start learning about hacking and now I am encouraged. The author of this blog shows good mastery pf hacking techniques. I believe that the beginning hackers have the most reliable information.Custom Help with Med School Personal Statement Writing

    ReplyDelete
  42. Nice post i really like it.Call us at 0800-090-3240 Adobe Support Number UK and Adobe Helpline Number UK to get quick and satisfied solution.

    ReplyDelete
  43. I have been through your blog and being a technical expert, I found it quite information giving. Here, you forgot to tell about the correct to counter the issue which is to contact the technicians. If one facing any tech problem, then contact us at keyword and for more information follow the link. Hotmail Helpline Number UK

    ReplyDelete
  44. Without a printer, we hardly able to fulfill our daily requirements of office work and Lexmark is that which offers affordable printers. Even so, tech issues are making the users problematic and to encounter with that, you must talk to the technicians at 0800-090-3240. LEXMARK Printer Helpline Number UK

    ReplyDelete
  45. Not able to use some tools of Adobe application properly. At this time, you need to contact the technicians at 0800-090-3220 to get the proper resolution of the issue in a short time. Adobe Customer Care Number UK

    ReplyDelete
  46. It is great to completing editing or multi-media related work with Adobe applications, yet these applications show some tech issues too and to resolve that, you should talk to the technical experts at Adobe Support Number UK & Adobe Support Number UK

    ReplyDelete
  47. Getting tech complication in using Adobe in your system, so you need the correct assistance from our experts of Adobe Support Number UK & Adobe Contact Number UK to resolve that quickly.

    ReplyDelete
  48. Nice Blog! Thanks for sharing nice information with us. This Blog is very helpful for Software customer. If you are getting any technical issues…Read More

    ReplyDelete
  49. Such a very informative blog. Very interesting to read this blog.I would like to thank you for the efforts.
    thank..! really useful information..
    Canon Printer Support Number Uk 0808-178-2624
    Canon Printer Helpline Number Uk
    Canon Printer Contact Number Uk

    ReplyDelete
  50. Nice Blog! Thanks for sharing nice information with us
    Call at
    Brother Printer Support Number Uk 0808-178-2624

    ReplyDelete
  51. Adobe is a famous operating system across the population of UK. It is an advanced platform to suit your projects to build with. For any technical related errors, you an call our skilled technicians at Adobe Help Number UK & Adobe Helpline Number UK

    ReplyDelete
  52. Very nice posting. Your article us quite informative. Thanks for the same. Our service also helps you to market your products with various marketing strategies, right from emails to social media. Whether you seek to increase ROI or drive higher efficiencies at lower costs, Pegasi Media Group is your committed partner will provide b2bleads.
    APPENDING SERVICES

    ReplyDelete
  53. This comment has been removed by the author.

    ReplyDelete
  54. Hotmail Helpline provides UK 0800-098-8587

    Toll Free Number to get email account problems resolution in their hotmail / outlook

    account.we are best hotmail helpline number in

    uk
    .

    ReplyDelete
  55. Facing Problems in opening Adobe applications, then you must contact the technician at Adobe Help Number UK 0808-238-7544.

    ReplyDelete
  56. Try out the free and easy accessible service provided by Hotmail. It is totally trustable service provider. If you are confronted to any technical issue in it, call us at 0800-090-3240 and get easy resolution on the spot. Hotmail Contact Number UK

    ReplyDelete