Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 24 May 2005 08:06:35 +0200
From: Simon Marechal <simon@...quise.net>
To: john-users@...ts.openwall.com
Subject: Re: *.chr files

Solar Designer wrote:
> So the point of enforcing strong Windows passwords is moot.  Perhaps
> it may still be worthwhile to do this to deal with those cases where
> an attacker would possess other than LM hashes of the same passwords.

An attacker has to be admin first to dump the passwords. Good passwords 
will slow him down. And it is possible to disable the storage of NT 
passwords if you do not need backward compatibility ...

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ