Pocok5 t1_iueja0t wrote on October 30, 2022 at 6:53 PM

You don't crack passwords sitting in front of the login prompt. You use some exploit that lets you get into the backend of the system without the password then copy the whole ass database to your own computer. Or you do some social engineering and ask somebody who has a password that lets you get at the database to tell you. From there you can poke at the hashed (hopefully lmao) passwords at your leisure.

ZacQuicksilver t1_iuen4c3 wrote on October 30, 2022 at 7:19 PM

In more detail:

While some password hacks do go through the front end of the system; that usually doesn't work because of the account timeouts. Instead, most password hacks happen when a hacker gets hold of a website's password database. Given the database, a hacker can brute-force password guesses on their own computer without needing to deal with the front end.