I have uploaded a paper on the feasibility of dictionary attacking/brute
forcing Windows 2000 Kerberos passwords that may be of general interest.
The vulnerability will probably not be news to anyone here, but as far as I
am aware this has not received much public discussion in the context of
Markus Kuhn has released this after learning of
Joe Loughry's announcement.
-
Announced 5 March 2002.
To be presented at IEEE Oakland conference, May 2002
http://www.cl.cam.ac.uk/~mgk25/ieee02-optical.pdf
Optical Time-Domain Eavesdropping Risks of CRT Displays
Markus G. Kuhn
--- begin forwarded text
Status: U
Date: Tue, 5 Mar 2002 23:05:24 -0500
Reply-To: Law Policy of Computer Communications
[EMAIL PROTECTED]
Sender: Law Policy of Computer Communications
[EMAIL PROTECTED]
From: Seth Johnson [EMAIL PROTECTED]
Organization: Real
[Moderator's note: No, I don't want to open up the floodgate, but this
has a genuinely new idea in it among some others -- the notion that
perhaps the good of the entertainment industry isn't as important as
general purpose computing. That said, this is far afield from
cryptography (I'm only