Re: Install Wizard 'Looks Too Complicated'

2009-11-30 Thread Jan Claeys
Op zondag 29-11-2009 om 00:47 uur [tijdzone +0800], schreef John McCabe-Dansted: > There are also algorithms for extracting the password from XP as > well... XP passwords are compared to hashes, and you can't extract the password from a hash. -- Jan Claeys -- Ubuntu-devel-discuss mailing lis

Re: Install Wizard 'Looks Too Complicated'

2009-11-30 Thread Matt Wheeler
2009/11/30 Jan Claeys : > Op zondag 29-11-2009 om 00:47 uur [tijdzone +0800], schreef John > McCabe-Dansted: >> There are also algorithms for extracting the password from XP as >> well... > > XP passwords are compared to hashes, and you can't extract the password > from a hash. There are brute-for

Re: Install Wizard 'Looks Too Complicated'

2009-11-30 Thread John Moser
On Mon, Nov 30, 2009 at 12:55 PM, Matt Wheeler wrote: > 2009/11/30 Jan Claeys : >> Op zondag 29-11-2009 om 00:47 uur [tijdzone +0800], schreef John >> McCabe-Dansted: >>> There are also algorithms for extracting the password from XP as >>> well... >> >> XP passwords are compared to hashes, and you

Re: Install Wizard 'Looks Too Complicated'

2009-11-30 Thread Shentino
With regards to cracking tools being bad, I imagine they do come in handy during security audits. If there's going to be hacking tools out there anyway, the good guys may as well have them too, since you can't really take them away from the bad guys. On Mon, Nov 30, 2009 at 10:47 AM, John Moser

Re: Install Wizard 'Looks Too Complicated'

2009-11-30 Thread John Moser
On Mon, Nov 30, 2009 at 2:36 PM, Shentino wrote: > With regards to cracking tools being bad, I imagine they do come in handy > during security audits. > If there's going to be hacking tools out there anyway, the good guys may as > well have them too, since you can't really take them away from the

Re: Install Wizard 'Looks Too Complicated'

2009-11-30 Thread Matt Wheeler
2009/11/30 John Moser : > List some not-silly reasons.  "Because people could use it for > theoretical/practicable attacks" is not a reason, because 1) you could > decline to reveal the password (but allow verification); and 2) there > are other tools for this that are just as accessable. Mainly j

Re: Install Wizard 'Looks Too Complicated'

2009-11-30 Thread James Westby
On Mon Nov 30 13:47:34 -0500 2009 John Moser wrote: > List some not-silly reasons. You're serious? Ok. * Takes a long time to crack any password that's not in the dictionary and more than a few characters long. * Rainbow tables would be too large to fit on the CD. * We can't know up-fro

Re: Install Wizard 'Looks Too Complicated'

2009-11-30 Thread Matt Wheeler
2009/11/30 James Westby : > On Mon Nov 30 13:47:34 -0500 2009 John Moser wrote: >> List some not-silly reasons. > > You're serious? Ok. > >  * Takes a long time to crack any password that's not in the dictionary and >    more than a few characters long. >  * Rainbow tables would be too large to fit

Re: Install Wizard 'Looks Too Complicated'

2009-11-30 Thread John Moser
Matt Wheeler wrote: > 2009/11/30 John Moser : > > Mainly just the bad press that Ubuntu would get as a result. Can you > imagine the headlines there would be? "Ubuntu operating system hacks > Windows computers" Agreed on marketing, though again I tend to not care. It doesn't send information

Re: Install Wizard 'Looks Too Complicated'

2009-11-30 Thread Derek Broughton
James Westby wrote: > On Mon Nov 30 13:47:34 -0500 2009 John Moser wrote: >> List some not-silly reasons. > > You're serious? Ok. > > * Takes a long time to crack any password that's not in the dictionary > and > more than a few characters long. > * Rainbow tables would be too large to