[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Network Solutions Crypt-PW Authentication-Scheme vulnerability
Previously Peter van Dijk wrote:
> crypt() passwords are never more than 8 characters - anything beyond
> 8 characters is discarded.
That highly depends on the crypt implementation. The original crypt
only used 8 characters, but modern implementations can use different
schemes (md5 for example).
Wichert.
--
_________________________________________________________________
/ Nothing is fool-proof to a sufficiently talented fool \
| wichert@cistron.nl http://www.liacs.nl/~wichert/ |
| 1024D/2FA3BC2D 576E 100B 518D 2F16 36B0 2805 3CB8 9250 2FA3 BC2D |
|
