If you follow the first hit on the search suggested by Jonathan you see as hardware requirements:
* Intel-based Windows NT/2000/XP PC * Minimum 512MB Ram recommended * Minimum 600Mhz processor recommended If you check out current trends on this matter you see attackers are often using very powerful GPU's (less than 200 dollars) or even top cloud computing systems with compromised/malicious accounts. The probability of web2py applications become target of an elaborate attack has to do with the interest you and all web2py community has in having important organizations to use it (or not). If organizations like big enterprises use it, then web2py will surely be an important link of attack and possible failure, possibly breaking its name as "rock solid" into the future. It doesn't take web2py to be much popular to become an important target. All it takes it's an "easyJet" company (or smaller) to find it valuable and adopt it. This is also why I would encourage Massimo Di Pierro not to leave such a security problem by defect behind a handler like CRYPT() that may encourage many programmers concerned about security to use it and think they are safe when they are not. On Aug 1, 7:18 am, Bottiger <bottig...@gmail.com> wrote: > Yes the software is there, but the hardware is a completely different > matter. > > On Jul 31, 11:15 pm, Jonathan Lundell <jlund...@pobox.com> wrote: > > > > > On Jul 31, 2009, at 11:11 PM, Bottiger wrote: > > > > 2. Attackers will specifically target Web2Py's deterministic algorithm > > > with a custom rainbow table. > > > > This is a possibility, but it is not a big one. First of all, even > > > with md5, generating tables is not something the average script kiddie > > > can do. > > > Google: rainbow table generator kit > > >http://www.google.com/search?hl=en&safe=off&q=rainbow+table+generator... --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "web2py-users" group. To post to this group, send email to web2py@googlegroups.com To unsubscribe from this group, send email to web2py+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/web2py?hl=en -~----------~----~----~----~------~----~------~--~---
