3 ms·
Interesting that the author mentioned John The Ripper" I remember (with a lot of ass covering) using this at British Telecom back in the day - to break into so
by walshemj 5y ago
Interesting that the author mentioned John The Ripper" I remember (with a lot of ass covering) using this at British Telecom back in the day - to break into some NT boxes where a customer had lost the passwords.
I got a break quickly (they had used a date as the password) - before I went to stage to stage 2 and used the 20 or so development sun boxes we had over night.
- e12e 5y agoQuick reminder that PasswordYYYY (eg: Password2021) will pass most "secure" checks (three letter categories, capital, lowercase, numbers). Optionally add a dot or exclamation point - and odds are, in a large organization (assuming you have a list of valid logins) - you'll get a hit..
- slaymaker1907 5y agoUnfortunately a lot of these programs are smart enough to figure this out automatically yet the complexity checkers aren't. I think it would be a good idea in an enterprise environment to have a a few cracking servers try to generate the potential new password for a few seconds since a lot of these passwords are easy to derive.
- Spooky23 5y agoMany companies use 90 day polices as well. So Fall2012! qualifies as a secure password.