Re: Senior M$ member says stop using passwords completely!

On 16 Oct 2004, at 07:46, Tim wrote:
> "Pre-computation attacks are a somewhat new and interesting phenomenon
> we are starting to encounter 'in the wild' through chainsaw security
> consultants. What they do is they pre-compute all of the possible LM
> or
> NT password hashes of a given length with a given character set and
> burn
> the pre-computed password-hash-to-password-mappings to DVD. Heck they
> can even submit their request to have your password hash reversed back
> into a password using a web page someone has setup to do the job for
> you
> (sorry, not going to give out THAT URL here.) . . . for free!"

To save everyone the looking:

http://lasecwww.epfl.ch/~oechslin/projects/ophcrack/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html