nanog mailing list archives
Re: AltDB? (IRR support & direction at ARIN)
From: Jeff Wheeler <jsw () inconcepts biz>
Date: Mon, 10 Jan 2011 17:54:03 -0500
On Mon, Jan 10, 2011 at 12:37 PM, Jon Lewis <jlewis () lewis org> wrote:
On Sun, 9 Jan 2011, Charles N Wyble wrote:I am simply suggesting it is dangerous and irresponsible to run an IRR with only MAIL-FROM authentication, and quite easy to also support CRYPT-PW. ARIN should either support passwords or immediately makeThe trouble is, since the DES crypt passwords are publicly accessible, even CRYPT-PW is not much security. I suspect with a copy of the db, a passsword cracking program, and some modest computing capacity, you could crack all
DES crypt() is not completely trivial yet, but I agree, it is far from state-of-the-art. It is substantially superior to MAIL-FROM. In addition, MERIT reduced this problem by simply filtering out the hashes from the RADB.db file and whois output (and presumably also, the www.radb.net tools.) -- Jeff S Wheeler <jsw () inconcepts biz> Sr Network Operator / Innovative Network Concepts
Current thread:
- Re: AltDB? (IRR support & direction at ARIN), (continued)
- Re: AltDB? (IRR support & direction at ARIN) John Curran (Jan 09)
- Re: AltDB? (IRR support & direction at ARIN) Randy Bush (Jan 09)
- Re: AltDB? (IRR support & direction at ARIN) Jeff Wheeler (Jan 09)
- Re: AltDB? (IRR support & direction at ARIN) Randy Bush (Jan 09)
- Re: AltDB? (IRR support & direction at ARIN) Jeff Wheeler (Jan 09)
- Re: AltDB? (IRR support & direction at ARIN) Charles N Wyble (Jan 09)
- Re: AltDB? (IRR support & direction at ARIN) Charles N Wyble (Jan 09)
- Re: AltDB? (IRR support & direction at ARIN) Charles Gucker (Jan 09)
- Re: AltDB? (IRR support & direction at ARIN) Jeff Wheeler (Jan 09)
- Re: AltDB? (IRR support & direction at ARIN) Jon Lewis (Jan 10)
- Re: AltDB? (IRR support & direction at ARIN) Jeff Wheeler (Jan 10)
- Re: AltDB? Jay Coley (Jan 05)
- RE: AltDB? Randy Epstein (Jan 05)
- Re: AltDB? Jared Mauch (Jan 05)
- Re: AltDB? Joe Abley (Jan 05)
- Re: AltDB? Randy Bush (Jan 05)
- Re: AltDB? David Conrad (Jan 05)
- Re: AltDB? Christopher Morrow (Jan 05)
- Re: AltDB? David Conrad (Jan 05)
- Re: AltDB? Randy Bush (Jan 05)