Just one more character bro

On 28-Mar-2026 00:10:31 EDT:

A while back I wrote a post about how various password hashing algorithms hold up to brute force attacks. A few years have passed and more powerful graphics cards have come out. Seems like a few employers are starting to respond to this by requiring even longer passwords. Unfortunately I have some bad news for those CISOs: longer passwords cannot overcome the fact that the Windows password hash wasn't even that good for its era (UNIX md5crypt designed a year later is much stronger) and by modern standards it is absolutely abysmal. But just one more character bro! I promise bro just one more character and it'll fix everything bro!

Note: The previous infographic was a single RTX-4090. This time I used a 12 x RTX-5090 configuration because thats what Hive Systems uses for theirs.