Hi,

Somebody can help on how to unsubscribe this list??

Thanks in advance.

Maralc

--

Marcelo Alcantara
Senior Developer/Architect
[EMAIL PROTECTED]
+55 11 81968823

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Andy Depue
Sent: Thursday, November 10, 2005 3:13 PM
To: [email protected]
Subject: [Acegisecurity-developer] RainbowCrack service and Acegi

Just found an interesting article over on the Register:
http://www.theregister.co.uk/2005/11/10/password_hashes/page2.html
It's about a new online service that has built huge "rainbow" tables 
containing hashes and the associated passwords that generate those hashes
for 
the most popular hashing algorithms.  They talk about how most security 
systems were not implemented carefully enough, and so become easy to crack 
with rainbow tables.  Now, someone correct me if I'm wrong, and this was
even 
briefly mentioned in the article, but doesn't a good salt algorithm foil 
this?  Acegi has the ability to salt hashes, so I guess the next question
is, 
is Acegi's implementation good enough to thwart such easy cracking?

  - Andy


-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer



-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Home: http://acegisecurity.sourceforge.net
Acegisecurity-developer mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer

Reply via email to