Date: Thu, 27 Mar 2008 13:34:28 +0200 From: fgeek@...k.fi (Henri Salo) To: john-users@...ts.openwall.com Subject: Re: web api to john like service Before you do anything you should read and use better tools to force users to use better (strong) passwords. You can read about such tools in here: http://www.openwall.com/pam/ and http://www.openwall.com/passwdqc/ After that you could just once force users to change their passwords or check every hash for weak passwords. Doing this process you arhieve better password policy and automatically get rid of most brute force attempts. On Thu, Mar 27, 2008 at 11:10:07AM +0530, ram wrote: > Is there a web-api where I can provide a username and crypt password and > the passwords are show if easily crackable > > I have a number of machines with a lot of mail users. Now I see a lot of > spammers exploiting weak passwords and sending spam. > > Running john regularly on all machines is painful , since these machines > are far too many and scattered across. starting john , and waiting for > it to finish and then using the results is humanly impossible > > > I wish to run a small utility that will connect to a single server > upload passwords and filter out all weak accounts > > How Can this be done ? Is there some service already that does this > > Thanks > Ram > > -- > To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply > to the automated confirmation request that will be sent to you. -- To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply to the automated confirmation request that will be sent to you.
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.