full-disclosure - RE: Linux (in)security

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <3F96BCD1.8010900@hetisw.nl>
From: vdongen at hetisw.nl (I.R. van Dongen)
Subject: RE: Linux (in)security

Shawn McMahon wrote:

> Schmehl, Paul L wrote:
>
>> Now, lest you get your hopes up and think it's possible to change the
>> world, read this:
>>
>> http://www.ukauthority.com/articles/story898.asp
>
>
> Ok, I read that as "we asked them to enter their password, and 15% of 
> them typed something in response".  I don't see where it says they 
> verified that this was indeed the person's password.
>
> I'd have typed something in there too; probably "your password".

I don't know a security expert that has only one password.

I'd prob type some jiberish.....or maybe "your password".....

(I don't include windows-wizard-engineers that have only one password 
because everything is in 1 big AD)

Gr,

Ivo