full-disclosure - Apparently the practice was prevalent

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: luke at normanonline.co.uk (Luke Norman)
Subject: Apparently the practice was prevalent

hggdh wrote:

>So obviously there are people out there that will have to scramble to
>get their things back working. After all, MS suddenly took it out...
>and, also expected, MS would have to provide a backdoor. We can just
>hope that a future fix will take it out for once and for all.
>
I'm afraid I disagree. Surely its better to disable by default, but 
leave it so that it can be turned on if necessary. People argue that 
windows needs to be shipped with services turned off, but not removed 
completely - a virus could turn these services on, but that isn't 
sufficient cause for removing them. It's a user preference, and if I 
want to be able to enter urls in user:pass@...t format, then I should be 
given the option to do so

Luke