Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 16 Jul 2012 08:01:51 +0200
From: Frank Dittrich <frank_dittrich@...mail.com>
To: john-dev@...ts.openwall.com
Subject: Re: problem with disc space for shared files in MJohn

On 07/15/2012 01:24 PM, Aleksey Cherepanov wrote:
> I heard that some users have about 40gb of wordlists individually.
> Currently it would be a problem if MJohn would copy all files to the
> server.
> 
> Problems are
> 1) exhausted disk space,
> 2) exhausted traffic limit,
> 3) just slow.
> 
> Possible improvements:
> - compress files (I expect wordlists to give good ratio),
> - drop git and use something much easier that allows to download one
> file instead of the full repository (I'll do that for other reasons
> too: for instance staging of files to check checksums could be done
> easier),

This can help a bit, but won't solve the general problem.
> - allow attacks with just sha1 instead of the real files: user does not
> upload files but shares sha1, so he could stop and restart this
> attack on his own cores while other users could check they do not
> run the same attacks, but for modification of attack users should ask
> the owner (also it is useful because not all users want to share their
> files),

Not just this user would be able to run the attacks, but any user who
also has a file with the same sha1sum stored locally.

For files which are still publicly available, we could provide download
links and conversion instructions to get those files, e.g., for the
rockyou list: (sorted by usage frequency, compressed):
http://downloads.skullsecurity.org/passwords/rockyou-withcount.txt.bz2

Some of these files can be fetched prior to the contest.
Some others will be added during the contest.

Frank

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ