<story><title>PassGAN: A Deep Learning Approach for Password Guessing</title><url>https://arxiv.org/abs/1709.00440</url></story><parent_chain></parent_chain><comment><author>tbiehn</author><text>I&amp;#x27;m a bit confused as to why they cite &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.usenix.org&amp;#x2F;conference&amp;#x2F;usenixsecurity16&amp;#x2F;technical-sessions&amp;#x2F;presentation&amp;#x2F;melicher&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.usenix.org&amp;#x2F;conference&amp;#x2F;usenixsecurity16&amp;#x2F;technical...&lt;/a&gt;, but then don&amp;#x27;t evaluate their performance relative. 
The selection of JTR and HashCat rule eval is troubling - &amp;#x27;Best64&amp;#x27; isn&amp;#x27;t the way a skilled attacker uses those tools. 
It would be cool to see these teams participating in cracking event; &lt;a href=&quot;http:&amp;#x2F;&amp;#x2F;contest.korelogic.com&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;contest.korelogic.com&amp;#x2F;&lt;/a&gt; or tasked against un-recovered corpus; &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;hashes.org&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;hashes.org&amp;#x2F;&lt;/a&gt;&lt;p&gt;Of course, maybe a more accurate view was that the paper isn&amp;#x27;t actually seeking to advance to the state of the art in password cracking, and has other motivations.</text></comment>
<story><title>PassGAN: A Deep Learning Approach for Password Guessing</title><url>https://arxiv.org/abs/1709.00440</url></story><parent_chain></parent_chain><comment><author>matrix2596</author><text>PaGAN would have been a better name</text></comment>