[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] Senior M$ member says stop using passwords completely!



On 16 Oct 2004, at 07:46, Tim wrote:
"Pre-computation attacks are a somewhat new and interesting phenomenon
we are starting to encounter 'in the wild' through chainsaw security
consultants. What they do is they pre-compute all of the possible LM or
NT password hashes of a given length with a given character set and burn
the pre-computed password-hash-to-password-mappings to DVD. Heck they
can even submit their request to have your password hash reversed back
into a password using a web page someone has setup to do the job for you
(sorry, not going to give out THAT URL here.) . . . for free!"

To save everyone the looking:


http://lasecwww.epfl.ch/~oechslin/projects/ophcrack/

Attachment: PGP.sig
Description: This is a digitally signed message part