PaulDotCom mailing list archives

rainbow tables at Shmoocon


From: jim.halfpenny at gmail.com (Jim Halfpenny)
Date: Wed, 6 Jan 2010 15:18:26 +0000

I'm not sure I would trust the rainbow tables in such a collection. It would
be easy to drop poisoned tables where a pecentage of the values were bogus.
Nice idea in principle but if you have the CPU time to verify the tables so
they are trustworthy you could just generate them yourself.

Mind you, I wouldn't mind some more exotic rainbow tables - Oracle password
hashes anyone?

Jim
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20100106/ce7ed2dd/attachment.htm 


Current thread: