RE: AOL passwords

From: TUTTLE, TERESA A (SBCSI) (tt6361@sbc.com)
Date: 05/01/02 

From: "TUTTLE, TERESA A (SBCSI)" <tt6361@sbc.com>
To: Jacob McMaster <jmcmaster@appliedsystems.com>, vuln-dev@securityfocus.com
Date: Wed, 1 May 2002 12:01:53 -0500

        Jacob -

        I believe this has always been true of most versions of Unix I'm
familiar with. Also take into account the fact that there are only 7 random
bits per character and you're getting even less protection than you first
think!

        Terri Tuttle

-----Original Message-----
From: Jacob McMaster [mailto:jmcmaster@appliedsystems.com]
Sent: Wednesday, May 01, 2002 9:42 AM
To: vuln-dev@securityfocus.com
Subject: AOL passwords

I don't know if anyone has said this but, AOL allows you to use a 8+
character password, but when signing in it will only check the first 8
character and then it doesn't matter if you type the rest of the password or
type the rest of it wrong it will let you in that account. Also their
access to your email via the web, it will actually tell you its the wrong
password if your password is over 8 characters and you type the whole thing
in, you have to type only the 1st 8 characters to get into it. Not sure
this is a major issue, but would make the cracking process eaiser for
someone if they know there is a max of 8 characters needed.

Relevant Pages

  • Re: PING: Former AGDers
    ... Remember, if the wife gets addicted, you can register another account ... with the *same* personal info and transfer the wife's character to the ... Druids have absolutely no issue finding parties compared to hunters. ... if you want to discover the teamplay fast, go build a druid, you'll be ...
    (alt.games.warcraft)
  • Re: can I know how to write a html parser in C
    ... On each iteration of the loop, fetch one character ... then transit to state 3 else transit to state 4 ... you are not presently in quotes. ... You must account for comments! ...
    (comp.lang.c)
  • Re: Account permanently disabled?
    ... Hope this helps and good luck to getting your account restored. ... I was under the understanding that paid character transfers ... get my items and gold restored as well as get the transfer reversed. ...
    (alt.games.warcraft)
  • Re: Account permanently disabled?
    ... transfers had been requested, ...  I was under the understanding that paid character transfers ... get my items and gold restored as well as get the transfer reversed. ... Well today I check my email to find my account has been permanently ...
    (alt.games.warcraft)
  • Re: Password problem
    ... Just type the 14 character password. ... Then go to User Accounts in Control Panel. ... If you are using Windows XP Pro and have encrypted data, ... Now I can not log into my> account because it will not accept my 14 or taking the> last 2 characters to make it a 12-character password and> that still didn't work. ...
    (microsoft.public.windowsxp.security_admin)