Full Disclosure mailing list archives

Re: NEW windows password encryption flaw..


From: Jeremy Gaddis <jeremy () gaddis org>
Date: 23 Jul 2003 14:58:05 -0500

On Wed, 2003-07-23 at 12:48, Darren Bennett wrote:
Is this new? I read about it on slashdot...

http://lasecpc13.epfl.ch/ntcrack/

Basically, it seems that Microsoft has (yet again) screwed up the
implementation of their encryption scheme. This makes cracking any hash
a matter of seconds. Oops... 

http://msn-cnet.com.com/2100-1009_3-5053063.html

j.

-- 
Jeremy L. Gaddis   <jeremy () gaddis org>   <http://www.gaddis.org>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: