Re: Senior M$ member says stop using passwords completely!

[Andrew Farmer <andfarm () teknovis com>]

On 16 Oct 2004, at 07:46, Tim wrote:
> "Pre-computation attacks are a somewhat new and interesting phenomenon
> we are starting to encounter 'in the wild' through chainsaw security
> consultants.  What they do is they pre-compute all of the possible LM 
> or
> NT password hashes of a given length with a given character set and 
> burn
> the pre-computed password-hash-to-password-mappings to DVD.  Heck they
> can even submit their request to have your password hash reversed back
> into a password using a web page someone has setup to do the job for 
> you
> (sorry, not going to give out THAT URL here.) . . . for free!"

To save everyone the looking:

http://lasecwww.epfl.ch/~oechslin/projects/ophcrack/

Attachment: PGP.sig
Description: This is a digitally signed message part