bugtraq - RE: $100 plus several of my books if you can crack my Windows password hashes.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Tue, 18 Jul 2006 20:17:31 -0400
From: "Roger A. Grimes" <roger@...neretcs.com>
To: "Michael Scheidell" <scheidell@...nap.net>,
	<bugtraq@...urityfocus.com>
Subject: RE: $100 plus several of my books if you can crack my Windows password hashes.

No, but I laughed because you are right. I hadn't thought of that.  

If anyone has any doubts about whether I'm using the right email
address, I'll be glad to send you a signed messaged with my PGP or
Verisign digital ID, or you can call me. I work for InfoWorld, so you
can email me there as well, roger_grimes@...oworld.com.

I assure you I already have the plaintext equivalents.

Roger

-----Original Message-----
From: Michael Scheidell [mailto:scheidell@...nap.net] 
Sent: Tuesday, July 18, 2006 7:58 PM
To: Roger A. Grimes; bugtraq@...urityfocus.com
Subject: RE: $100 plus several of my books if you can crack my Windows
password hashes.

You probably are who you say you are, and you probably own the accounts
these passwords are from, but could not someone post a bunch of NTLM
hashes and ask the world to crack them for him? Even if he dint' own the
accounts?

So, is this a social engineering test as well?