Re: Display User Password?

[Douglas Handy <dhandy@xxxxxxxxx>]

Don,

> Actually there are some special DES/crypto crackers that are actually
> multiple parallel processors on the same board that use specialized
> software to do just that concept...

But why bother when just an ordinary PC, using a free program off the
internet, can crack typical users' passwords in under 3 minutes? 
Granted, you do need access to the encrypted password so it knows when
it has a match.  But that would be true of optimized hardware as well.

I'm not even convinced there is a significant security exposure
difference in being able to do it in under 20 minutes, versus the
nearly 2 hours it could take on my old PC.  It may not finish over
lunch break, but so what?

The morale of the story is to securely limit access to the encrypted
passwords, especially if running on the 10-char password length with
lanman compatibility.

Doug