Re: Flog 1.1.2 Remote Admin Password Disclosure

[endrazine <endrazine () gmail com>]

typos :

endrazine a écrit :
> Here again, I agree. Now, if one needs to exhaustively try every 
> possible 32b hashes with the largest possible charset (or even bigger hashes
> with a smaller - like those alphanumerical keys you just mentionned), to 
> break a password hash, the it's not a "*BIG*" security issue like 
> mentionned earlier imho.
>   
s/hashes/passwords/ indeed

Cheers,

endrazine-

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/