Free Republic
Browse · Search
General/Chat
Topics · Post Article

To: antiRepublicrat
If I ever mentioned a product on this thread and failed to provide you with a link to it, please tell me so that I can do so.

I did provide a link to the technology. I never said product X. So it does exist and you can even create one yourself. Remember the OSS mantra of being able to do what you need to with code? Well, here's your chance. I can't disclose the nature of the other one, so I won't. However, if you have a hard time finding one to buy, just contract someone to write one for you (if you can't do it). Heck, I may be willing to write one for you for a large fee. Or ask adam_az. He's in the security scene. If he's more than a script kiddie, he can easily write one as well.

The reason they aren't that common is because the windows security is good enough. It's easier to just increase the password length to 15 than it is to replace the cryptologic routines.

518 posted on 08/31/2005 8:22:20 AM PDT by for-q-clinton (If at first you don't succeed keep on sucking until you do succeed)
[ Post Reply | Private Reply | To 516 | View Replies ]


To: for-q-clinton
I did provide a link to the technology. You did? Where?

I never said product X.

You seemed to imply that I could just drop it in. In any case, now your solution is on the same theoretical level as my solution for strengthening Linux passwords that already can't be cracked by any existing lookup tables.

Remember the OSS mantra of being able to do what you need to with code?

The difference is that in your case to get Windows passwords up to UNIX standards you have to write a complete replacement of the Windows password management system (don't forget, you have to store the individual salts next to the passwords), while I would just have to put a few for loops into Linux's current password management system. No hard work, no large fee, just a tiny bit of editing and a recompile. You don't have that option with Windows.

Sorry, your solution doesn't fly in this disussion. It isn't available to the general public even as a paid-for add-on (which I would normally discount anyway), and therefore isn't applicable to a discussion of practical Windows password security.

Just admit it, Windows password handling is inferior.

525 posted on 08/31/2005 9:13:20 AM PDT by antiRepublicrat
[ Post Reply | Private Reply | To 518 | View Replies ]

Free Republic
Browse · Search
General/Chat
Topics · Post Article


FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson