full-disclosure - Re: Large password list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CABgawubL9B=mm6YR2Ee=Rsqb3NU=kf8Y--g__-=Wq5THuChtEg@mail.gmail.com>
Date: Fri, 2 Dec 2011 16:26:51 -0500
From: Charles Morris <cmorris@...odu.edu>
To: Valdis.Kletnieks@...edu
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Large password list

Valdis,

> (For real fun, consider that published and unpublished works are treated differently.  And
> a password list almost always becomes a published work without the permission of
> the author(s) ;)

Talking of currently implemented systems...

One could argue that the author of lists resulting from cracked hashes
is the cracker,
as the cracker is simply computing one of the infinite collisions that
each hash intrinsically has.

Nobody can say if that collision was caused by the "original password"

Now back to operational content...

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/