11 ms·
I think if they have the ability to steal the passwords, even if they weren't plain text, they didn't do the proper precautions of encrypting with a salt. So ei
by Hilyin 14y ago
I think if they have the ability to steal the passwords, even if they weren't plain text, they didn't do the proper precautions of encrypting with a salt. So either way, they failed.
- betterunix 14y agoAt this point, passwords should be considered obsolete when it comes to securing things. We should be using smartcards and cryptographic techniques; humans are just not good enough at generating or remembering random strings for passwords to be considered a good idea.
- amalag 14y agoYes I personally like the Yubikey idea which integrates with AD. Keeping a physical token and just pushing a button is nice.
- tedunangst 14y agoThe "Let's Set Up a Domain Controller" wizard doesn't ask how much salt you'd like to add to your passwords.
- brown9-2 14y agoA domain controller is a Microsoft server, not custom built software.