Re: phpBB Security Bugs

[Christian Vogel <chris () obelix hedonism cx>]

Hi Konrad, Lucas and List,

On Fri, Feb 21, 2003 at 11:19:52AM +0100, Konrad Rieck wrote:
> I am just wondering... You are talking about guessing a 33-digit
> hexadecimal number? 

No, he was talking about guessing each hex-digit one at a time,
so he will need 16*33=528 guesses to exhaust the whole "hash-space".

See in Lucas' SQL: mid(user_password,n,1)=char(guess), the "algorithm"
goes like this:

for(n=0..32){
 for(g='0'..'9','A'..'F')
   if( guessed_right(n,g) ){
     hash[n]=g;
     break;
   }

        Chris

-- 
First snow, then silence.
This thousand dollar screen dies
so beautifully.
-- Simon Firth