• Subject: AS/400 Rewarding Challenge
  • From: "Steve Glanstein" <mic@xxxxxxxxx>
  • Date: Tue, 21 Sep 1999 09:17:41 -1000
  • Cc: "Leif Svalgaard" <leif@xxxxxxx>

>-----------------------------
>
>>Date: Mon, 20 Sep 1999 20:14:50 -0500
>>From: leif@ibm.net
>>Subject: Re: Rewarding Challenge AS/400
>
>>From: Steve Glanstein <mic@aloha.com>
>
>> The answer to people who can crack the AS/400 password...I'll send them
the
>> encrypted password and see if they can decrypt it! This was done several
>> times with PGP and the network went silent.
>
>you are awfully silent right now, Steve.
>What gives?

Leif et al:

I've read some information that shows that the AS/400 password encryption
is not cryptographically sound. I am currently in contact with an
individual who says he can brute-force crack the password. He has a sample
and I expect a result in about a day. Based upon what I have read, I expect
the gentleman to succeed. After receiving physical proof of this, I can
pass it on to the world.

I certainly hope that IBM can fix it...even a simple MD5 encryption would
be better than what I've read.

Steve Glanstein
mic@aloha.com

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---

This thread ...

Follow-Ups:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2019 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available here. If you have questions about this, please contact [javascript protected email address].