Home page logo

pen-test logo Penetration Testing mailing list archives

RE: Where are Windows "Enforce password history" passwords stored?
From: <Wil.Allsopp () ins com>
Date: Tue, 30 Aug 2005 21:59:03 +0100

James Leighe [jamesleighe () gmail com] wrote:

It's stored as a hash, so if you find out how to access them, you
would have to crack it. So basically, it's not worth the time when an
attacker could just go for the current password.

This shows a fundamental misunderstanding of security as well as the way
hackers think. There are many advantages for an attacker to have your
previous passwords - passwords are reused and some may be current on
peripheral or entirely separate systems.


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]