Re: passwords and crypt?

2001-11-29 Thread J.R. Blain
crypt(3) only uses the first 8 characters for it's hash. roniosko is 8 characters. Any extras would be ignored. I think you'll find trying roniosk would fail. md5 passwords are a much better option and available at least from slink (2.1) on (iirc). I'm not sure about earlier versions. Roger

Re: passwords and crypt?

2001-11-29 Thread Mike Dresser
On Fri, 30 Nov 2001, Roger Keays wrote: Hi all, I'm not sure if this is common knowledge or not, but I have just noticed the effects of having the first two letters of your password the same as the first two in your login name... You can use any extension of your password!! e.g., on

Re: passwords and crypt?

2001-11-29 Thread thomas fischer
On Fri, 30 Nov 2001, Roger Keays wrote: I'm not sure if this is common knowledge or not, but I have just noticed the effects of having the first two letters of your password the same as the first two in your login name... You can use any extension of your password!! e.g., on my Woody

Re: passwords and crypt?

2001-11-29 Thread Tim Haynes
Roger Keays [EMAIL PROTECTED] writes: I'm not sure if this is common knowledge or not, but I have just noticed the effects of having the first two letters of your password the same as the first two in your login name... You can use any extension of your password!! Wrong. You can guess the

Re: passwords and crypt?

2001-11-29 Thread Régis Grison
Roger Keays wrote: Hi all, I'm not sure if this is common knowledge or not, but I have just noticed the effects of having the first two letters of your password the same as the first two in your login name... You can use any extension of your password!! e.g., on my Woody box I added

Re: passwords and crypt?

2001-11-29 Thread Mike Dresser
Interesting. I'm running Debian 2.2r2 (dist-upgraded to testing). I selected MD5 for my passwords during installation. However, it seems that it has defaulted my passwords to 8 characters too: From /etc/pam.d/passwd (login is the same) password required pam_unix.so nullok obscure

Re: passwords and crypt?

2001-11-29 Thread J.R. Blain
crypt(3) only uses the first 8 characters for it's hash. roniosko is 8 characters. Any extras would be ignored. I think you'll find trying roniosk would fail. md5 passwords are a much better option and available at least from slink (2.1) on (iirc). I'm not sure about earlier versions. Roger

Re: passwords and crypt?

2001-11-29 Thread Mike Dresser
On Fri, 30 Nov 2001, Roger Keays wrote: Hi all, I'm not sure if this is common knowledge or not, but I have just noticed the effects of having the first two letters of your password the same as the first two in your login name... You can use any extension of your password!! e.g., on my

Re: passwords and crypt?

2001-11-29 Thread thomas fischer
On Fri, 30 Nov 2001, Roger Keays wrote: I'm not sure if this is common knowledge or not, but I have just noticed the effects of having the first two letters of your password the same as the first two in your login name... You can use any extension of your password!! e.g., on my Woody

Re: passwords and crypt?

2001-11-29 Thread Tim Haynes
Roger Keays [EMAIL PROTECTED] writes: I'm not sure if this is common knowledge or not, but I have just noticed the effects of having the first two letters of your password the same as the first two in your login name... You can use any extension of your password!! Wrong. You can guess the

Re: passwords and crypt?

2001-11-29 Thread Régis Grison
Roger Keays wrote: Hi all, I'm not sure if this is common knowledge or not, but I have just noticed the effects of having the first two letters of your password the same as the first two in your login name... You can use any extension of your password!! e.g., on my Woody box I added a

Re: passwords and crypt?

2001-11-29 Thread Malcolm Ferguson
Mike Dresser wrote: On Fri, 30 Nov 2001, Roger Keays wrote: I'm not sure if this is common knowledge or not, but I have just noticed the effects of having the first two letters of your password the same as the first two in your login name... You can use any extension of your

Re: passwords and crypt?

2001-11-29 Thread Mike Dresser
Interesting. I'm running Debian 2.2r2 (dist-upgraded to testing). I selected MD5 for my passwords during installation. However, it seems that it has defaulted my passwords to 8 characters too: From /etc/pam.d/passwd (login is the same) password required pam_unix.so nullok obscure