Announcement

Collapse
No announcement yet.

Cracking Windows passwords in seconds

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

    Cracking Windows passwords in seconds

    If your passwords consist of letters and numbers, beware.
    Swiss researchers released a paper on Tuesday outlining a way to speed the cracking of alphanumeric Windows passwords, reducing the time to break such codes to an average of 13.6 seconds, from 1 minute 41 seconds.

    The method involves using large lookup tables to match encoded passwords to the original text entered by a pereson, thus speeding the calculations required to break the codes. Called a time-memory trade-off, the situation means that an attacker with an abundance of computer memory can reduce the time it takes to break a secret code.

    The results highlight a fact about which many security researchers have worried: Microsoft's manner for encoding passwords has certain weaknesses that make such techniques particularly effective, Philippe Oechslin, a senior research assistant and lecturer at the Cryptography and Security Laboratory of the Swiss Federal Institute of Technology in Lausanne (EPFL), wrote in an e-mail to CNET News.com.

    "Windows passwords are not very good," he wrote. "The problem with Windows passwords is that they do not include any random information."


    source


    Its always good to keep changing Passwords for stuff which is valulable to you, once every few weeks on random days, but it wouldn't stop the person from decoding the pw.
    Courage is going from failure to failure without losing enthusiasm. Courage is the ladder on which all the other virtues mount.

    #2
    good........
    waissay nothing new in it... we already know, how good they are in operating systems and applications..

    Comment


      #3
      Well it doesn't matter if the OS is Windows or Linux or Solaris .. passwords can be cracked if they are based on

      dictionary words
      dictionary words extended with digits (e.g house01)
      or names or names extended by digits.

      But if your password is

      [email protected]!

      then I bet 99% chances are that it wont be cracked no matter it is Windows or Solaris.

      Comment


        #4
        Originally posted by Najim:
        Well it doesn't matter if the OS is Windows or Linux or Solaris .. passwords can be cracked if they are based on

        dictionary words
        dictionary words extended with digits (e.g house01)
        or names or names extended by digits.

        But if your password is

        [email protected]!

        then I bet 99% chances are that it wont be cracked no matter it is Windows or Solaris.

        Can you ADD "@" in your pw field??
        Courage is going from failure to failure without losing enthusiasm. Courage is the ladder on which all the other virtues mount.

        Comment


          #5
          i didn't so either
          Courage is going from failure to failure without losing enthusiasm. Courage is the ladder on which all the other virtues mount.

          Comment


            #6
            "an attacker with an abundance of computer memory can reduce the time it takes to break a secret code".... and if he can't lanaat hai uss par!


            chalo.. lets start hacking..
            mujh sey khushiaan ley gaya aur degya kagaz kay phoool
            abb meray ghar mein paray hain jabaja kagaz kay phoool

            Comment


              #7
              Originally posted by Ansoon:
              "an attacker with an abundance of computer memory can reduce the time it takes to break a secret code".... and if he can't lanaat hai uss par!


              chalo.. lets start hacking..


              Everything is possible
              Courage is going from failure to failure without losing enthusiasm. Courage is the ladder on which all the other virtues mount.

              Comment


                #8
                Way back when I was using NT4 ... yes @ was allowed in password. In unix/linux u definately can use @ in ur password.

                Comment


                  #9
                  Originally posted by Najim:
                  Way back when I was using NT4 ... yes @ was allowed in password. In unix/linux u definately can use @ in ur password.

                  thanks fo the info!!
                  Courage is going from failure to failure without losing enthusiasm. Courage is the ladder on which all the other virtues mount.

                  Comment


                    #10
                    Use urdu/arabic words, extended with a number, instead
                    Muslims are so good at dividing that they can divide the atom. If you see two Muslims, probably they belong to 3 parties.
                    Al-Ghazali

                    Comment


                      #11
                      Please get it straight. I think the experiment they did was using Win-NT (NT LAN Manager, or as one of my friends call it NT LAN Damager).

                      Win2K uses Kerberose tickets which is a much more secure method of authentication. Also on a switched network it is not easy to sniff the LAN MAN hash.


                      So don't panic. I guess somebody was doing a thesis, he did a good job. Demonstrated something which was well known to sysadmins for a long time. Still, Wish him luck for his thesis defence

                      Comment


                        #12
                        the bios password is the easiest to bypass.

                        Comment


                          #13
                          ^^ ROTFL! .. short J1 and kabaammm! ..

                          (no more chinese laundry)
                          thanks for pulling head outta your ass long enough to read my post, then highlighting & reading this. Signed:
                          -faizy

                          Comment


                            #14
                            Originally posted by Najim:
                            Well it doesn't matter if the OS is Windows or Linux or Solaris .. passwords can be cracked if they are based on

                            dictionary words
                            dictionary words extended with digits (e.g house01)
                            or names or names extended by digits.

                            But if your password is

                            [email protected]!

                            then I bet 99% chances are that it wont be cracked no matter it is Windows or Solaris.
                            I can reset a password on Windows NT, 2000, 2000 server and Advance server no matter how long or what kinda password it is. There is a backdoor for all the above mentioned OS.

                            My Boss had a win 2000 server and he forgot the password I helped him to reset the password without losing anything

                            Funny thing is u gota use the linux bootable disk with some changes and configurations
                            I grow in learning as I grow in age.

                            Comment


                              #15
                              I am sure we are talking about remotely hacking the password or network security .... Its a prime rule that if u have console (physical) access then u can do whatever u want ... no matter what system u use.

                              Comment

                              Working...
                              X