It's brute force attack,and relies on a dictionary. Only weak passwords will be cracked, like common words etc. I don't think you need to worry at all if you enforce passwords that must contain numeric besides characters etc.
Richard Ji -----Original Message----- Sent: Tuesday, December 17, 2002 1:14 PM To: Multiple recipients of list ORACLE-L oh this is very scary.... especially that price did you try out the demo? I'm still in "catch-up, deal with crises" mode so I haven't had a chance Rachel --- [EMAIL PROTECTED] wrote: > Hmm... > > Well maybe you *can* crack oracle passwords. > > I've just ordered the full version of this product. ( $4, I don't > think I need to bother the purchasing department ). > > I'll let you know how it works. > > Jared > > > > > > "Mark Leith" <[EMAIL PROTECTED]> > Sent by: [EMAIL PROTECTED] > 12/17/2002 06:23 AM > Please respond to ORACLE-L > > > To: Multiple recipients of list ORACLE-L > <[EMAIL PROTECTED]> > cc: > Subject: RE: password > > > Yes, you can do this, but it still doesn't tell you the users > *current* > password does it? > > Has anyone tried: > > http://home.earthlink.net/~adamshalon/oracle_password_cracker/ > > ? > > Mark > -----Original Message----- > Sent: 17 December 2002 13:59 > To: Multiple recipients of list ORACLE-L > > > And you can use it to change it to your convenience and later > get this encrypted password "IN" without the knowledge of > the user.. > > Regards > Jai > > > > Paulo Gomes <[EMAIL PROTECTED]> > Sent by: [EMAIL PROTECTED] > 12/17/02 06:08 PM > Please respond to ORACLE-L > > To: Multiple recipients of list ORACLE-L > <[EMAIL PROTECTED]> > cc: > Subject: RE: password > > > > nope u can get the encripted password from the oracle dictionáry > -----Original Message----- > Sent: terça-feira, 17 de Dezembro de 2002 11:34 > To: Multiple recipients of list ORACLE-L > > Check the post-it note on their monitor? > > :) > -----Original Message----- > Sent: 17 December 2002 10:55 > To: Multiple recipients of list ORACLE-L > > he can't but he can change it to a new one and then put the old back > on > -----Original Message----- > Sent: terça-feira, 17 de Dezembro de 2002 4:09 > To: Multiple recipients of list ORACLE-L > > how can a dba see the password of a user. > > The new MSN 8: smart spam protection and 2 months FREE* -- Please see > the official > ORACLE-L FAQ: http://www.orafaq.com -- Author: faisal ahmad INET: > [EMAIL PROTECTED] Fat City Network > Services -- 858-538-5051 http://www.fatcity.com San Diego, California > -- Mailing list and web hosting services > --------------------------------------------------------------------- > To > REMOVE yourself from this mailing list, send an E-Mail message to: > [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the > message BODY, include a line containing: UNSUB ORACLE-L (or the name > of > mailing list you want to be removed from). You may also send the HELP > > command for other information (like subscribing). > > > > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.com > -- > Author: > INET: [EMAIL PROTECTED] > > Fat City Network Services -- 858-538-5051 http://www.fatcity.com > San Diego, California -- Mailing list and web hosting services > --------------------------------------------------------------------- > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). > __________________________________________________ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Rachel Carmichael INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Richard Ji INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).