RE: UNIX password auditing tool and the search for dictionaries too

[Mike Dresser <mdresser () windsormachine com>]

On Sat, 9 Aug 2003, Tomas Wolf wrote:

> I would like to note a little about the security of 4 digit pin... I
> believe that author wanted to point out that thanks to the fact, that
> you can't try the 4 digit number more than three times at a time - which
> makes it a pretty strong system, not that 4 digit is a strong password.

I saw a paper a few months back that claimed you'd need something like
15-24 tries to get a password, due to problems with the PIN algorythm.
Oh, and insider access.  Very minor detail :D

http://www.theregister.co.uk/content/55/29425.html

actual paper link is at:
http://www.cl.cam.ac.uk/TechReports/UCAM-CL-TR-560.pdf

Mike

---------------------------------------------------------------------------
----------------------------------------------------------------------------