Slashdot Mirror
Swiss Researchers Exploit Windows Password Flaw
Bueller_007 writes "CNET is carrying an article about a new (albeit simplistic) method used to hack alphanumeric Windows passwords in a matter of seconds, rather than minutes. To blame is a 'weakness in Microsoft's method of encoding passwords.' According to the authors, the same method, when used on Mac OS X, Unix and Linux boxes, however, could require either 4,096 times more memory or 4,096 times longer."
A few more details: Mister.de writes "As an example we have implemented an attack on MS-Windows password hashes. Using 1.4GB of data (two CD-ROMs) we can crack 99.9% of all alphanumerical passwords hashes (2 37 ) in 13.6 seconds whereas it takes 101 seconds with the current approach using distinguished points. We show that the gain could be even much higher depending on the parameters used. This was found at the
Cryptography and Security Laboratory of the Swiss Federal Institute of Technology in Lausanne (EPFL)."
yay, another windows exploit story on slashdot. who cares? where's the linux news? where's the stories that really matter?
is today flame microsoft day?
..a Microsoft vulnerability? Who'da thunk.
I thought 640k would be enough for anybody.
http://www.fsckin.com/
Even *nix is affected ny this. I suppose a PKI infrastructure and passwds (shadow - MD5 of course). Maybe it's time for the chip implant.
du du du du du du du du (Twilight Zone Theme)....
.sig
But windows machines arnt nearly as useful. At best you get a crappy zombie bot, possibly a warez server. Breaking into a Linux box gives you much more power (raw sockets make for a much more fun zombie), and a better chance of finding something good.
Pain lasts, kid. Its how you know you're alive. Sometimes I think this growing up thing is just pain management-TheMaxx
For being a true, full-throttle homosexual and not one of these "ooo i'm too ugly to get a girl so I'll just use linux" fags.