john-users - Re: *.chr files

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Tue, 24 May 2005 08:06:35 +0200
From: Simon Marechal <simon@...quise.net>
To: john-users@...ts.openwall.com
Subject: Re: *.chr files

Solar Designer wrote:
> So the point of enforcing strong Windows passwords is moot.  Perhaps
> it may still be worthwhile to do this to deal with those cases where
> an attacker would possess other than LM hashes of the same passwords.

An attacker has to be admin first to dump the passwords. Good passwords 
will slow him down. And it is possible to disable the storage of NT 
passwords if you do not need backward compatibility ...