Bob La Quey wrote: > > For double super-duper security, password the zip file that you hide > inside the image.
The password protection on .zip files is a joke. >From the pgpdoc1.txt, distributed as part of the PGP 2.6.3 There is a company called AccessData (87 East 600 South, Orem, Utah 84058, phone 1-800-658-5199) that sells a package for $185 that cracks the built-in encryption schemes used by WordPerfect, Lotus 1-2-3, MS Excel, Symphony, Quattro Pro, Paradox, and MS Word 2.0. It doesn't simply guess passwords-- it does real cryptanalysis. Some people buy it when they forget their password for their own files. Law enforcement agencies buy it too, so they can read files they seize. I talked to Eric Thompson, the author, and he said his program only takes a split second to crack them, but he put in some delay loops to slow it down so it doesn't look so easy to the customer. He also told me that the password encryption feature of PKZIP files can often be easily broken, and that his law enforcement customers already have that service regularly provided to them from another vendor. -john ftp://ftp.ifi.uio.no/pub/pgp/2.x/src/pgp263is.tar.gz -- [email protected] http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list
