Letters-Only LM Hash Database

Posted by CmdrTaco on Tuesday November 2, 2004 @05:19AM from the need-new-security dept.

Peter Clark writes "Disk storage has increased tremendously in the past 5 years and the blatant insecurities in the antiquated LM hashing technique have not gone away; though functionality has been added to disable LM hashes, this is not set by default. With some help from Elcomsoft, simple flat files have been created that hold every combination of LM hash for letters only passwords. Jesko has coded a server application which allows you to access this database. Simply telnet to: beginningtoseethelight.no-ip.org on port 2501 and paste in a LM hash. So how does this differ from Rainbow tables? Well this will return a password 100% of the time, using minimal processor power, in approximately less than 0.2 seconds."

3 of 237 comments (clear)

Min score:

Reason:

Sort:

less than 0.2 seconds by Sediyama · 2004-11-02 05:24 · Score: 5, Funny

I think someone is underestimating the /. effect.
awright! by sootman · 2004-11-02 05:47 · Score: 5, Funny

now we're gonna kick it old-skool and /. a telnet server! woo hoo, just like the old days! our next target: gopher://sunsite.unc.edu

--
Dear Slashdot: next time you want to mess with the site, add a rich-text editor for comments.
Whew! I'm still safe by DongleFondle · 2004-11-02 05:48 · Score: 5, Funny

I guess I'm still relatively safe though because my admin password is not only 10 characters long, but has capitals, lower case, numbers and symbols in random order.

Its H82sd*e2Tn.

Nobody is ever going to crack that!!!