full-disclosure - Re: Multiple issues with Mac OS X AFP client

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20040305154630.GA11912@SDF.LONESTAR.ORG>
From: petard at freeshell.org (petard)
Subject: Re: Multiple issues with Mac OS X AFP client

On Fri, Mar 05, 2004 at 12:49:57AM +0100, Stefan Bethke wrote:
> >SecureMac.com has a article on this if anyone is interested.
> 
> Is that so?  Google didn't seem to find much...

Your google-fu must be weak. OP was correct about password storage, and
google does indeed turn up articles about that on SecureMac.com. His
assumption about password transmission being the same was mistaken, as
you so handily pointed out. Anyway, here's the link to some general
info:
http://www.securemac.com/appletalk.php

And here's the algorithm to deode stored passwords along with an
implementation:
http://www.securemac.com/data/macfspwd.c

There's plenty more interesting info there, but you sound like you need
the google practice, so I'll let you find it yourself.

regards,

petard

-- 
If your message really might be confidential, download my PGP key here:
http://petard.freeshell.org/petard.asc
and encrypt it. Otherwise, save bandwidth and lose the disclaimer.