Re: password security in *nix systems?
Edward Leiper wrote:
> DM <dont_spam_me@reply_to_group.instead> writes:
>> Some md5, etc yoda would be able to confirm/deny that, or shed more
>> light on it.
>
> Based on mathematical functions they are. Deduce input from output
> you cannot. To crack, every input try you must.
Except that folks use dumb passwords, so if you have a list
of the most popular passwords, you can push them thru
the hash (even with the salt) and just compare the results
to what is in the shadow password file.
--
Pat
|