Re: passwords and crypt?

2001-11-29 Thread Mike Dresser
> Interesting. I'm running Debian 2.2r2 (dist-upgraded to testing). I > selected MD5 for my passwords during installation. However, it seems > that it has defaulted my passwords to 8 characters too: > > >From /etc/pam.d/passwd (login is the same) > > password required pam_unix.so nullok obs

Re: passwords and crypt?

2001-11-29 Thread Malcolm Ferguson
Mike Dresser wrote: > > On Fri, 30 Nov 2001, Roger Keays wrote: > > > I'm not sure if this is common knowledge or not, but I have just noticed > > the effects of having the first two letters of your password the same as > > the first two in your login name... You can use any extension of your > >

Re: passwords and crypt?

2001-11-29 Thread Régis Grison
Roger Keays wrote: Hi all, I'm not sure if this is common knowledge or not, but I have just noticed the effects of having the first two letters of your password the same as the first two in your login name... You can use any extension of your password!! e.g., on my Woody box I added a use

Re: passwords and crypt?

2001-11-29 Thread Tim Haynes
Roger Keays <[EMAIL PROTECTED]> writes: > I'm not sure if this is common knowledge or not, but I have just noticed > the effects of having the first two letters of your password the same as > the first two in your login name... You can use any extension of your > password!! Wrong. You can guess t

Re: passwords and crypt?

2001-11-29 Thread Mike Dresser
> Interesting. I'm running Debian 2.2r2 (dist-upgraded to testing). I > selected MD5 for my passwords during installation. However, it seems > that it has defaulted my passwords to 8 characters too: > > >From /etc/pam.d/passwd (login is the same) > > password required pam_unix.so nullok ob

Re: passwords and crypt?

2001-11-29 Thread thomas fischer
On Fri, 30 Nov 2001, Roger Keays wrote: > > I'm not sure if this is common knowledge or not, but I have just noticed > the effects of having the first two letters of your password the same as > the first two in your login name... You can use any extension of your > password!! > > e.g., on my

Re: passwords and crypt?

2001-11-29 Thread Mike Dresser
On Fri, 30 Nov 2001, Roger Keays wrote: > > Hi all, > > I'm not sure if this is common knowledge or not, but I have just noticed > the effects of having the first two letters of your password the same as > the first two in your login name... You can use any extension of your > password!! > > e.g

Re: passwords and crypt?

2001-11-29 Thread J.R. Blain
crypt(3) only uses the first 8 characters for it's hash. roniosko is 8 characters. Any extras would be ignored. I think you'll find trying roniosk would fail. md5 passwords are a much better option and available at least from slink (2.1) on (iirc). I'm not sure about earlier versions. Roger Kea

Re: passwords and crypt?

2001-11-29 Thread Malcolm Ferguson
Mike Dresser wrote: > > On Fri, 30 Nov 2001, Roger Keays wrote: > > > I'm not sure if this is common knowledge or not, but I have just noticed > > the effects of having the first two letters of your password the same as > > the first two in your login name... You can use any extension of your >

passwords and crypt?

2001-11-29 Thread Roger Keays
Hi all, I'm not sure if this is common knowledge or not, but I have just noticed the effects of having the first two letters of your password the same as the first two in your login name... You can use any extension of your password!! e.g., on my Woody box I added a user called 'ron' and hi

Re: passwords and crypt?

2001-11-29 Thread Régis Grison
Roger Keays wrote: > > Hi all, > > I'm not sure if this is common knowledge or not, but I have just > noticed the effects of having the first two letters of your password > the same as the first two in your login name... You can use any > extension of your password!! > > e.g., on my Woody box

Re: passwords and crypt?

2001-11-29 Thread Tim Haynes
Roger Keays <[EMAIL PROTECTED]> writes: > I'm not sure if this is common knowledge or not, but I have just noticed > the effects of having the first two letters of your password the same as > the first two in your login name... You can use any extension of your > password!! Wrong. You can guess

Re: passwords and crypt?

2001-11-29 Thread thomas fischer
On Fri, 30 Nov 2001, Roger Keays wrote: > > I'm not sure if this is common knowledge or not, but I have just noticed > the effects of having the first two letters of your password the same as > the first two in your login name... You can use any extension of your > password!! > > e.g., on my

Re: passwords and crypt?

2001-11-29 Thread Mike Dresser
On Fri, 30 Nov 2001, Roger Keays wrote: > > Hi all, > > I'm not sure if this is common knowledge or not, but I have just noticed > the effects of having the first two letters of your password the same as > the first two in your login name... You can use any extension of your > password!! > > e.

Re: passwords and crypt?

2001-11-29 Thread J.R. Blain
crypt(3) only uses the first 8 characters for it's hash. roniosko is 8 characters. Any extras would be ignored. I think you'll find trying roniosk would fail. md5 passwords are a much better option and available at least from slink (2.1) on (iirc). I'm not sure about earlier versions. Roger Ke

passwords and crypt?

2001-11-29 Thread Roger Keays
Hi all, I'm not sure if this is common knowledge or not, but I have just noticed the effects of having the first two letters of your password the same as the first two in your login name... You can use any extension of your password!! e.g., on my Woody box I added a user called 'ron' and his