A password-cracking expert has unveiled a computer cluster that can cycle through as many as 350 billion guesses per second. It's an almost unprecedented speed that can try every possible Windows passcode in the typical enterprise in less than six hours.
The five-server system uses a relatively new package of virtualization software that harnesses the power of 25 AMD Radeon graphics cards. It achieves the 350 billion-guess-per-second speed when cracking password hashes generated by the NTLM cryptographic algorithm that Microsoft has included in every version of Windows since Server 2003. As a result, it can try an astounding 958 combinations in just 5.5 hours, enough to brute force every possible eight-character password containing upper- and lower-case letters, digits, and symbols. Such password policies are common in many enterprise settings. The same passwords protected by Microsoft's LM algorithm—which many organizations enable for compatibility with older Windows versions—will fall in just six minutes.
Over €10 million (approximately £8 million or $12.8 million) has been saved by the city of Munich, thanks to its development and use of the city's own Linux platform. The calculation of savings follows a question by the city council's independent Free Voters (Freie Wähler) group, which led to Munich's municipal LiMux project presenting a comparative budget calculation at the meeting of the city council's IT committee on Wednesday. The calculation compares the current overall cost of the LiMux migration with that of two technologically equivalent Windows scenarios: Windows with Microsoft Office and Windows with OpenOffice. Reportedly, savings amount to over €10 million.
