Re: Leaks

From: chris@nospam.com
Date: 07/04/02 

From: chris@nospam.com
Date: Wed, 03 Jul 2002 23:44:15 -0700

On Tue, 02 Jul 2002 00:39:32 GMT, alun@texis.com (Alun Jones) wrote:

>In article <afo7ee$r78$1@slb7.atl.mindspring.net>, my_email@my_domain_here.com
>(Pedro Hin) wrote:
>>There should be no need for anyone to EVER have your password. There are PC
>>migration tools out there which will allow the PC tech to do whatever needs to
>>be done without actualy acquiring access to the user's data or accounts.
>
>Except for the situation where you're converting accounts from tool/system A
>to tool/system B, and the two tools/systems use incompatible hash methods.

I've solved this problem with Lophtcrack. It took a week to crack all
the passwords, but then it was an easy matter to set all of the
passwords on the new setup. Scary part is that about 1/3 of the
passwords were cracked in an hour.

-Chris