Vulnerability Development mailing list archives

RE: AOL passwords


From: jon schatz <jon () divisionbyzero com>
Date: 01 May 2002 12:01:43 -0700

On Wed, 2002-05-01 at 10:01, TUTTLE, TERESA A (SBCSI) wrote:
      I believe this has always been true of most versions of Unix I'm
familiar with.  Also take into account the fact that there are only 7 random
bits per character and you're getting even less protection than you first
think!

most modern *nix use md5_crypt, which gives you an unlimited password
length instead of the 8 char limit.

-jon

-- 
jon () divisionbyzero com || www.divisionbyzero.com
gpg key: www.divisionbyzero.com/pubkey.asc
think i have a virus?: www.divisionbyzero.com/pgp.html
"You are in a twisty little maze of Sendmail rules, all confusing." 

Attachment: signature.asc
Description: This is a digitally signed message part


Current thread: