Re: Need help cracking wwwboard passwd.txt

[griffinb () HOTKEY NET AU (Brad Griffin)]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Date sent:              Tue, 19 Oct 1999 20:24:00 +0200
Send reply to:          Krzysztof Dabrowski <brush () POL PL>
From:                   Krzysztof Dabrowski <brush () POL PL>
Subject:                Re: Need help cracking wwwboard passwd.txt
Originally to:          VULN-DEV () SECURITYFOCUS COM
To:                     VULN-DEV () SECURITYFOCUS COM

> > Just to let you know,  it uses the same encryption scheme that can be
> > crack by progs the like of jack the ripper and cracker jack . It just
> > requires that you format the text correctly in the standard unix
> > format.
> >
> > But you definitely don't have the right to ask for payment, That's just
> > whack!
>
> Let's just forget about this particular case and concentrate on the
> meritum.
>
> What is wrong in calling a company , saying: "Your network is preety
> vulnerable to every exploit around. Script kiddies are probably hacking
> you 3 times a day. If you pay me well, i can tell you what's wrong and
> even fix it, if you don't , then bye bye and i'm not gonna waste my
> time".
>
> 1. It's not a black mail of any kind cause when they don't cooperate,
> you just forget about them. 2. Everything looks legal 3. Maybe it looks
> a bit like tele marketing, but it MAY work (aspecialy when you speak
> with management , not the technical staff).
>
> Just my 2 cents.
>
> Brush
Hi all.
Unfortunately, the majority of people will still see it as
extortion/blackmail. Maybe a better approach would be to say "hey, I
was doing some security testing or whatever for 'x' company and found
their network was full of holes. You appear to be running a similar
system. If you would like me to test your network and maybe make it
more secure here is my number. Give me a call". If they call, negotiate
a contract. If they don't, tough.
Catchya,

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.1 -- QDPGP 2.60
Comment: http://pgpkeys.mit.edu:11371/pks/lookup?op=get&search=0x6FD78581

iQA/AwUBOBISkAiK90dv14WBEQKDWgCg/gl3Ac85Udj6kop3jjNWJPLYTRQAoPfZ
4ou7X/B0XcwYjYTqRLsSPFYZ
=0rPc
-----END PGP SIGNATURE-----
Brad Griffin
Infotech undergrad & e-mail addict
CQU Rockhampton, Australia
Useful links:
http://www.pgpi.org/
http://spamcop.net/
http://www.avp.ru/