another hash project -> TMRL



edit: founded a BOINCstats Team over there - if willy attaches i will give him the lead

frank

I think they sell password cracking services based on the tables we generate for them. See http://www.hashbreaker.com/

I agree with PovAddict, they seem to be what I feared about BOINC: its use for illicit purposes, from running trojans to using it as a form of hacking attack.

I connected a system, but after reading what the project and the people behind it are about, I detached it.

Well, unlike other projects, at least this one stated what it was about and who was behind it. Many legit BOINC projects don't bother...

Like mine

oh sorry about that


so i will delete my acc and the team there (if its possible)

thx for the infos

I created a profile, now "Project getting profit for our CPU time! " is on their frontpage
EDIT: they removed UOTD box!

By the way, considering they like playing with passwords, change your TMRL password to be different from the one on other projects. They could crack the hash stored on server, and use the password to login on your account on other projects. Or maybe I'm being too paranoid...

I don't think so.

I wish I could delete that account. So, for now, I set the e-mail to Mailinator and the password to a bogus one.

i changed my name, email, password and even the team name to NOtoprofit

Apparently the *tables* can be downloaded for free, and only the cracking system (since it uses their CPU time) has to be paid. But still, we'd be helping create a database that hackers can use to crack passwords; bad idea.

Also, I couldn't register to their site (to see if tables could be downloaded). All submit buttons are in fact normal buttons that need Javascript to work, after I enable JS I get an error saying form is incomplete, but I filled even the optional fields!

And don't forget censorship; they removed UOTD box after I entered "Project getting profit for our CPU time!" on my profile.

Forum is open.

I have posted some of your questions and others on their board here:

http://hashbreaker.com:8700/tmrldrtg/forum_thread.php?id=1#1

If you have any other questions or conserns, plase ask them there, that way they can know about them and can get answered.

Hello Everyone,

I hope to help clarify a few things about the Hashbreaker & TMRL DRTG project.

1) Hashbreaker.com & TMRL are not hacker organizations.
We specialize in helping individuals and companies maintain strong password policies by auditing password strength. This audit helps companies maintain Sarbanes Oxley controls over their core networks.

2) Hashbreaker.com does not profit from tables generated using the BOINC system.
All tables generated (And even two tables MD5 & SHA1 that where not generated) using the BOINC client are freely available for download on the Hashbreaker.com website. The current table (MD5 1-8 mixalpha numeric) will be roughly 500GB in size when completed. It too will be 100% free. We have been working on a system that will allow those participants who help in the project free access to the Hashbreaker Online cracker. It should be finished mid-January. Until then, the Hashbreaker Online functionality is NOT commercial and may be used by anyone who registers an account.

3) We do not help Hackers
In our Use Policy it clearly states that anyone using our resources will be prosecuted to the fullest extent under US law. We will cooperate fully with any Law Enforcement agency to the limits of our Privacy Policy.

4) We are profiting from all this
We only profit from one of two things. 1: Use of our CPU’s for Rainbowtable Cryptanalysis 2: Sale of Rainbowtables we created without the BOINC System. We offer the BOINC system as a way of enhancing our services, and spreading security awareness.

5) We do not audit members passwords
That’s correct; we do NOT in any way audit the passwords of our members. Hard as it may be to believe, it is a voluntary subscription. If you are a security professional, use a strong password, mine is a minimum 32 chars long, and never used anywhere twice.

We do not hide what we do, we are willing to answer any password auditing or security related question posed.

The site is new and still in Beta, we will look into the Javascript issues that might prevent some people from accessing our site.

Anyone wishing to remove an account is free to do so, Thank you for you interest in our site, we are a proud supporter of the BOINC project and support it fully. Its an inspiration to many people who find new and creative ways to use technology for the benefit of everyone.

I am sorry for anyone who may have thought otherwise. I would encourage everyone to learn what a project is about before resorting to vandalism and defacements.

Thanks - Spudster

wow.. a responce in 20 min. impressive! Thx for clarifying some of the questions we had and I look forward to more crunching.

As far as I can see, he has been as open as the guys on Nanohive were when it was suddenly announced that Nanotech were in control there......

huh, so much judging and apparently noone bothered to look at this page: http://www.hashbreaker.com/index.php?option=com_content&task=view&id=5&Itemid=6

make that : http://www.hashbreaker.com/index.php?option=com_content&task=view&id=5&Itemid=6

You didn't use [ url ] tags on your forum post either so don't complain

hehehe

thanks tank gotten too used to sites that create active links automatically

same here, i keep having to go back and adding them funny how quickly one can get lazy, eh?

@ PovAddict - I missed that one... thx!

I think this is importent enough to repost here:

The first set of Rainbowtables generated using BOINC should be online by Thursday.

MySQLSHA1 mixalpha numeric (1-7) 100 tables

Each table is 655MB un-compressed (~392MB Compressed)

You will need 39 GB of free space to download, another 62.5 GB to un-compress (101.5GB total)

It will be available free of charge via Bit-torrent.

The MD5 set we are currently working on will be roughly 500 Gig un-compressed.

-Spudster

Yet again I say, don't use RAR!

@ willy - apparently the server software is new enough to support BAM!, can you add it once you are given the go-ahead?

I posted the question here:
http://hashbreaker.com:8700/tmrldrtg/forum_thread.php?id=8

So does this mean that it is safe to sign up fpr this project?