Great question.  The short answer is - it depends 

We currently have our resources and wordlists such that it takes between 12-24 hours to exhaust a given hash.  For 'fast' hashes - this time is obviously shorter.  For 'slow' hashes (i.e. WPA) - it can go to ~ 24 hours.  Again - this is for exhausting the search.  We search dictionaries (meaning actual dictionaries, lists of popular 'leaked' passwords, etc).  So if it's a hit, it will be pretty quick.  Once our system runs through those - we enter the 'wasteland' of brute patterns.  We can afford to do more of these on longer lengths on 'fast' algos, and much less on 'slow' (WPA).

So this is why WPA is double the price - as well as why we offer a half refund for hashes not found.  If the hash is on a password that is long enough/contains special characters/etc (i.e. all the good password practices that everyone should be using  ) - it won't be found.

So yes, if you submit a hash - it would be a good test (for both you and us).  Thanks.

Prices reduced 50% for the month of July ! 

Standard hash: $2.50 USD/BTC
MSCASH2/WPA: $5.00 USD/BTC

I searched through the thread and didn't see mention.  Any reason not to offer eBay GC's ? (other than the evil by association of PayPal  )

PS: Have bought multiple Amazon GC's through here, always lightning fast.  Also appreciate the updates as technical/hosting/etc. issues have arisen.  Excellent job.

onionkrack - accelerated hash recovery

http://krack7rkenltz3gj.onion/
(note: hidden service, you must access through tor)

For the non-tor savvy, etc:

https://krack7rkenltz3gj.tor2web.org/
(note: this defeats part of the purpose of a hidden service, use at your own discretion)

• For legitimate use only - penetration testing, data/networks that you have access to.  We do not endorse or condone unauthorized access.
• GPU accelerated hash recovery - multi-gig multi-language dictionaries, common permutations, brute patterns.
• Simple pricing - $5 USD BTC for single hash, $10 USD BTC for dcc2/mscash2/WPA.
• If your hash is not recovered - you get a half refund.
• Nearly completely automated process - including payment confirmation and refunds.
• Humans reachable via email for any issues - a654bdff@tormail.org

Excellent explanation - thank you.

Agreed - just because you don't necessarily 'need' to adopt the practice now - you are setting yourself up for trouble later.


Hmm, so it seems it gets 'worse' (the time it takes to confirm that is).  Any idea how this could be handled at that point in the future ?

I would think that common sense would dictate that a merchant using an automated system would not consider a transaction 'paid' until at least one confirmation ?

Is there really a big risk in seeing the transaction with 0 confirms and acting on it ?  I've read the high level info on unconfirmed, confirmed transactions, but I don't think I fully understand the risk.  Could someone provide a real example of a transaction 'showing up', but never getting a confirmation ?

I guess what I'm asking is the apparent trade-off:

0 confirms == very fast/ near instant processing
>0 confirms == variable time until 'paid' status, but safer ?

I started reading about them in early 2011.  Installed a CPU miner at the time and managed to get 0.01 BTC.  I just wanted to see it work.  Once I got some, my curiosity grew about what else I could do. 

Even though I don't fully understand all of the crypto and math, it still fascinates me.

No that's not your wallet password.  It's your password for the RPC service.

The RPC service is what's exposed via port 8332.  It's only responsive to requests from the same machine by default (127.0.0.1).  Adding the rpcallowip will 'allow' other IPs to *remotely* connect.

Also, you need to set rpcuser.  Any code you have to talk to this (perl, php, ruby, etc) will use rpcuser/rpcpassword to authenticate to the RPC service and 'do things'.

So far, just Amazon GC's.

Interested in the VPN service listed at the bottom of blockexplorer, but need to read up more on it (reviews, etc).

Hello,

Long time listener - first time caller.

Interested in mining, security, bitcoin-related gossip