Vulnerability Development: RE: AOL passwords

[jon schatz <jon () divisionbyzero com>]

On Wed, 2002-05-01 at 10:01, TUTTLE, TERESA A (SBCSI) wrote:
>       I believe this has always been true of most versions of Unix I'm
> familiar with.  Also take into account the fact that there are only 7 random
> bits per character and you're getting even less protection than you first
> think!
most modern *nix use md5_crypt, which gives you an unlimited password
length instead of the 8 char limit.

-jon

-- 
jon () divisionbyzero com || www.divisionbyzero.com
gpg key: www.divisionbyzero.com/pubkey.asc
think i have a virus?: www.divisionbyzero.com/pgp.html
"You are in a twisty little maze of Sendmail rules, all confusing."

Attachment: signature.asc
Description: This is a digitally signed message part