4 ms·

Yeah, the repos don’t even have a useful README, at least to understand whatever the software does…

• 300bps 5y ago
  It’s a widely known password auditing tool that’s been around for 24 years.
  • someperson 5y ago
    I have been following programming and technology for decades and I had never heard of it. Every project should have a concise (one or two sentence) description in the GitHub README and the website's homepage. Even the most well-known tools.
    • kortilla 5y ago
      Only if you care about onboarding people not familiar with the industry (security in this case). This is not a given for many devs.
    • 10x-dev 5y ago
      It's a cracking tool. If you never needed to crack NTLM passwords or bruteforce windows shared folder passwords over dialup, you might not have heard about it in the casual technology news.
    • washadjeffmad 5y ago
      Do you ever make it to DC or Blackhat? Not having to introduce/advertise who you are or what your tools do is part of the scene.
    • jeppesen-io 5y ago
      Ideally so, but if you've never of heard of this tool, you need to expand your news sources for many reasons. This is just a symptom
      • selcuka 5y ago
        This is assuming that everybody has an interest in cybersecurity. I can come up with equally well known (in specific circles) tools that you may not have heard of.
      • mydeskistoosm 5y ago
        Can you suggest some news sources?
    • da_chicken 5y ago
      I agree they should have a description in the readme, as a courtesy if nothing else. But L0phtCrack is a very well known tool. If you've never heard of it and have been following security stuff for decades, that's really on you.
      • philh 5y ago
        What do you mean by "that's really on you"? I'd normally interpret it as something like... "this is a state of affairs that would be different if you'd acted differently, and you knew or could have been able to know this in advance". Along those lines, anyway. But not having heard about a tool doesn't really seem to fit that.
        • ziddoap 5y ago
          >What do you mean by "that's really on you"? At some point, a tool is so ubiquitous that it's just odd to not have encountered it. You don't see many accountants that haven't heard of Excel, webdevs that haven't heard of Apache, construction workers that haven't heard of a hammer, or cybersec workers who haven't heard of L0phtCrack.
        • da_chicken 5y ago
          It means it's their fault because they clearly were not paying attention or their memory has failed them. L0phtCrack has been decreasingly relevant in the past 10 years or so -- it wasn't available for awhile and some free tools are similar so you were basically buying the rainbow tables -- but if you were in security in the Windows 2000 or Windows XP era, you know of this tool. There was a lot of discussion for years around and about password crackers after rainbow tables became a thing. It's not like not knowing what Wireshark or nmap is, but it is like saying that you've never even heard of Kismet or John the Ripper. Or like being a DBA for decades that never heard of Informix. Or a programmer for "decades" that has never even heard of Delphi. Like what were you doing in the early 2000s to have completely missed the death of Borland and Pascal and the popular variants? These are big enough events in the industry that if you're in it you're going to be aware of it.
    • justshowpost 5y ago
      They are not at github even, doh...
• Kikawala 5y ago
  README.md should be renamed to BUILD.md; check under doc/ for a useful description.