Re: vpopmail lacks authentication security

2001-01-21 Thread Damon Muller
While not wanting to buy into anyone's flame-war... On Sun, Jan 21, 2001 at 05:22:43PM +, Tamer Hassan wrote: > My system uses MD5 (blowfish) and 3DES (Triple DES). Do not say that MD5 != blowfish. MD5 (Message Digest 5) is a secure hash algorithm invented by Ron Rivest (The R in RSA). As

RE: vpopmail lacks authentication security

2001-01-21 Thread Tamer Hassan
>By itself, pretty much every piece of a security program is insecure. Hrm, is that a joke? >You claim >to be smart enough to make such a claim yet you don't know how to teach your >sytem to crypt using libraries other than the defaults. My system uses MD5 (blowfish) and 3DES (Triple DES). Do n

RE: vpopmail lacks authentication security

2001-01-19 Thread Matt Simerson
> -Original Message- > From: Tamer Hassan [mailto:[EMAIL PROTECTED]] > Sent: Friday, January 19, 2001 11:46 AM > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: vpopmail lacks authentication security > > Sorry, I hate to do this. If you didn't hat

vpopmail lacks authentication security

2001-01-19 Thread Tamer Hassan
Sorry, I hate to do this. I later posted to the list about the fact that vpopmail only uses DES. Matt Simerson said "it is silly to say that DES is insecure" and I disagreed. He then sent me a hashed password string betting me to crack it, and it turned out to be a BSD MD5 (what an iodiot). No