full-disclosure - Re: password plugin for linux?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Fri, 19 Oct 2007 09:17:43 -0400
From: <full-disclosure@....hush.com>
To: <winter@...nkyholdings.com>,<valdis.kletnieks@...edu>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: password plugin for linux?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Wow.  Most *constructive* comment you have ever made in your
history of security mailing list participation.  And you still suck.

- -JP<hates vladis>

On Thu, 18 Oct 2007 16:35:22 -0400 Valdis.Kletnieks@...edu wrote:
>On Thu, 18 Oct 2007 10:11:24 CDT, ". /" said:
>
>> naive question - but you know how i can load password plugins in
>window's to
>> capture password changes in the clear. is there any way to
>achieve the same
>> in linux? atm all i can think of (naively as i said) is to
>monitor the
>> shadow file or whatever and then <insert fav technique here> to
>open the
>> hash. but i am really trying to achieve a near realtime
>understanding of
>> password changes on the system side, so i can sync them out to
>apps or
>> systems or whatever.
>
>Modifying pam_cracklib to do what you want is probably a good
>place to start.
-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Charset: UTF8
Version: Hush 2.5

wpwEAQECAAYFAkcYrncACgkQqTTbVuUWvbLegwP+Kb5/SDsCS58pcNTZ6PYiAS3EQVXB
kORPODxvdXZRX8nr/qhuukoc8bqq1YKgJyx7udb3+8GvquzopLDDaNrC3VRyao5sjtFS
yd8kFa0Nex1PweCkoCaGICXiCXVqA0OI5HkUsbrdG7aJkM9RFx6y8g33nMccfXkrqlyw
hPnmVyY=
=/fem
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/