lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20040305154630.GA11912@SDF.LONESTAR.ORG>
From: petard at freeshell.org (petard)
Subject: Re: Multiple issues with Mac OS X AFP client

On Fri, Mar 05, 2004 at 12:49:57AM +0100, Stefan Bethke wrote:
> >SecureMac.com has a article on this if anyone is interested.
> 
> Is that so?  Google didn't seem to find much...

Your google-fu must be weak. OP was correct about password storage, and
google does indeed turn up articles about that on SecureMac.com. His
assumption about password transmission being the same was mistaken, as
you so handily pointed out. Anyway, here's the link to some general
info:
http://www.securemac.com/appletalk.php

And here's the algorithm to deode stored passwords along with an
implementation:
http://www.securemac.com/data/macfspwd.c

There's plenty more interesting info there, but you sound like you need
the google practice, so I'll let you find it yourself.

regards,

petard

-- 
If your message really might be confidential, download my PGP key here:
http://petard.freeshell.org/petard.asc
and encrypt it. Otherwise, save bandwidth and lose the disclaimer.


Powered by blists - more mailing lists