Hash It Out: Teaching Password Security Through Code

on YouTube ↗22m

" summary

A hands-on classroom project teaches hashing and rainbow table attacks by having students write Python code using MD5 + hashlib to precompute lists of common passwords (10 100 1000000 scales) then lookup leaked hashes against a student-scale dummy database and reward successful cracks with images on the GPN Meme Exchange The curriculum has three levels (paper lookup, file-based dictionaries, salts added) includes a social engineering game and reports students enjoy it and crack accounts reliably using rainbow tables

AI-written summary · about

" chapters (11)

1. 0:00Password security workshop intro
2. 2:53Bad rules to rainbow tables
3. 5:41Rainbow tables crack passwords
4. 7:27Simple password cracker in Python
5. 8:49Teaching intermediate techniques
6. 10:36Why salts matter
7. 11:40Social engineering challenges
8. 13:50Applying the hacker perspective to other topics
9. 16:36Simulating social media algorithms
10. 20:49Outsmarting algorithms
11. 21:51Summary and call to action

" related talks

• 09mLet’s Hash: Helping Developers with Password SecurityMatthew Smith, Lisa Geierhaas, Anna-Marie Ortloff, Alena Naiakshina · SOUPS 2022
• 59mHack Yourself FirstTroy Hunt · Web Directions South 2013
• 40mLive autopsy of a password: lessons learnt cracking secretsNiclas Kjellin · Øredev 2023
• 46mCryptography For BeginnersAdam Englander · Dutch PHP Conference 2018
• 25m80,000 Plaintext Passwords: An Open Source Love Story in Three ActsT.J. Schuck · Cascadia Ruby 2014
• 42mPassword HashingEmil Bayes · JavaScript fwdays'17
• 49mSalt Your Password Well: Password Hashes on the WebL. Krupiński · 4Developers 2015
• 29m80,000 Plaintext Passwords: An Open Source Love Story in 3 ActsT.J. Schuck · Red Dot Ruby Conference 2014