View Single Post

  #7 (permalink)  
Old 11-16-2005
Pat Farrell
 
Posts: n/a
Default Re: password security in *nix systems?

Edward Leiper wrote:
> DM <dont_spam_me@reply_to_group.instead> writes:
>> Some md5, etc yoda would be able to confirm/deny that, or shed more
>> light on it.

>
> Based on mathematical functions they are. Deduce input from output
> you cannot. To crack, every input try you must.


Except that folks use dumb passwords, so if you have a list
of the most popular passwords, you can push them thru
the hash (even with the salt) and just compare the results
to what is in the shadow password file.


--
Pat


Reply With Quote