Full Disclosure mailing list archives

Re: SMC Router safe Login in plaintext


From: KF <dotslash () snosoft com>
Date: Thu, 04 Sep 2003 10:36:42 +0000

as opposed to a plaintext password file... yes. IF someone were to crack into their dialup server sure a few passwords are only a john the ripper attack away... but that is certainly better than a raw text file with all clear text. Besides that if someone were to crack their dialup server they have a few more things to worry about than someone running john on their passwd.
-KF


Jeremiah Cornelius wrote:
I know when I worked for an ISP it was certainly not like that... their system ran off some sort of unix box using pppd. All their passwords were in etc/passwd and shadow with the rest of em.


/etc/shadow scales that well?  Yow!

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: