Re: To detect weak or blank password?

From: Valery Pryamikov (valery_at_harper.no)
Date: 10/20/05

  • Next message: lelteto: "Re: CSP error" 
    Date: Thu, 20 Oct 2005 20:20:26 +0200

    Hi,
    You might want to check my old "passwords" blog articles:
    http://www.harper.no/valery/PermaLink,guid,8cb9ada6-0f04-4ce0-a1b5-5b9a5f295df5.aspx
    http://www.harper.no/valery/PermaLink,guid,9ca0efba-aaab-45db-b594-729b9caa9e52.aspx
    http://www.harper.no/valery/PermaLink,guid,ecc09752-1942-4167-afae-040ab49ad9a4.aspx
    http://www.harper.no/valery/PermaLink,guid,a66a5aa6-9bd5-44fc-bc78-cb38b957b377.aspx
    http://www.harper.no/valery/PermaLink,guid,53a6777a-c110-4e3c-b0e3-3e2c1cf003e2.aspx
    http://www.harper.no/valery/PermaLink,guid,bf9737ab-e247-496a-afd8-8358a45247d8.aspx

    -Valery.
    http://www.harper.no/valery

    "Vladimir Nechipurenko" <vladnech@ua.fm> wrote in message
    news:%23qMTp3XzFHA.612@TK2MSFTNGP10.phx.gbl...
    > Hi all
    >
    > I've got the task to detect whether the user has the blank or weak
    > password.
    > I know that Microsoft Baseline Security Analyzer (MBSA) can do that, but
    > what I need to know what API it uses. Could anybody help me?
    >
    > Thanks
    >

  • Next message: lelteto: "Re: CSP error"

    Relevant Pages

    • Re: Defeating keyloggers with encrypted one time passwords (a patent spoiler?)
      ... have customers logging in from the internet to pay their bills. ... There ARE programs that effectively can block keyloggers based upon API ... passwords and usernames - then asks the user ...
      (sci.crypt)
    • Re: Radius Autentication using Chap
      ... There doesn't exist any feasible "decoding" for MD5. ... the passwords in reversible encryption and have your API provide access to ... >I need to authorized users with Chap, the user's names & password are> in an outside application that I have an API to it and they are not> Windows users. ...
      (microsoft.public.internet.radius)
    • Re: How to secure the Dotnet code
      ... As far as the HASP API is concerned, you will need to use your vendor ID and Passwords to call the API functions. ... We only have real world experience with the HARDLOCK dongle, ...
      (microsoft.public.dotnet.general)
    • Re: Keylogger resistance
      ... The onscreen keyboard still sends keys through the API that the ... keylogger will be watching anyway. ... passwords and ask randomly selected characters from each making sure ...
      (sci.crypt)