Re: Display User Password?

[rob@xxxxxxxxx]

How does one know if one has "lanman" capability?

Rob Berendt
-- 
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





Douglas Handy <dhandy@xxxxxxxxx> 
Sent by: midrange-l-bounces@xxxxxxxxxxxx
09/28/2004 05:25 PM
Please respond to
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>


To
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
cc

Fax to

Subject
Re: Display User Password?






Don,

> Actually there are some special DES/crypto crackers that are actually
> multiple parallel processors on the same board that use specialized
> software to do just that concept...

But why bother when just an ordinary PC, using a free program off the
internet, can crack typical users' passwords in under 3 minutes? 
Granted, you do need access to the encrypted password so it knows when
it has a match.  But that would be true of optimized hardware as well.

I'm not even convinced there is a significant security exposure
difference in being able to do it in under 20 minutes, versus the
nearly 2 hours it could take on my old PC.  It may not finish over
lunch break, but so what?

The morale of the story is to securely limit access to the encrypted
passwords, especially if running on the 10-char password length with
lanman compatibility.

Doug
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.