<?xml version="1.0" encoding="UTF-8"?><rss
version="2.0"
xmlns:content="http://purl.org/rss/1.0/modules/content/"
xmlns:dc="http://purl.org/dc/elements/1.1/"
xmlns:atom="http://www.w3.org/2005/Atom"
xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
> <channel><title>Comments on: Howto: Protect account against a password cracking attack</title> <atom:link href="http://www.cyberciti.biz/tips/howto-protect-account-against-password-crack-attack.html/feed" rel="self" type="application/rss+xml" /><link>http://www.cyberciti.biz/tips/howto-protect-account-against-password-crack-attack.html</link> <description>This is a Linux sys admin journal by Vivek about sys admin work, Linux tips &#38; tricks, hacks, news and more.</description> <lastBuildDate>Fri, 10 Feb 2012 20:37:43 +0000</lastBuildDate> <sy:updatePeriod>hourly</sy:updatePeriod> <sy:updateFrequency>1</sy:updateFrequency> <generator>http://wordpress.org/?v=3.3.1</generator> <item><title>By: Harka</title><link>http://www.cyberciti.biz/tips/howto-protect-account-against-password-crack-attack.html#comment-143891</link> <dc:creator>Harka</dc:creator> <pubDate>Mon, 26 May 2008 12:15:02 +0000</pubDate> <guid
isPermaLink="false">http://www.cyberciti.biz/tips/howto-protect-account-against-password-crack-attack.html#comment-143891</guid> <description>&gt; Do not write down password
I disagree with that. In this day and age there&#039;s almost no way to NOT write down passwords.
I see it this way: when you do write it down (assuming, of course, you store everything in a reasonably secure place...like your wallet) it makes it much easier to choose GOOD passwords, as opposed to lousy one&#039;s just so you can remember them...
Btw., most authentication routines use 128-bit encryption/hashing, incl. Linux passwords (MD5). In order to make your passwords at least as strong as the underlying algorithm you need at least 28 *randomly chosen* characters, if you were only picking from the 26 lower-case english alphabet. Picked from upper and lower-case (52 chars) you&#039;d need 23 randomly chosen characters and if you add the 0-9 numbers into the mix (62 chars), you&#039;d still need at least 22 random characters out of that.
Now you know how weak your password really is compared to the technical implementation of it :-)</description> <content:encoded><![CDATA[<p>&gt; Do not write down password</p><p>I disagree with that. In this day and age there&#8217;s almost no way to NOT write down passwords.<br
/> I see it this way: when you do write it down (assuming, of course, you store everything in a reasonably secure place&#8230;like your wallet) it makes it much easier to choose GOOD passwords, as opposed to lousy one&#8217;s just so you can remember them&#8230;</p><p>Btw., most authentication routines use 128-bit encryption/hashing, incl. Linux passwords (MD5). In order to make your passwords at least as strong as the underlying algorithm you need at least 28 *randomly chosen* characters, if you were only picking from the 26 lower-case english alphabet. Picked from upper and lower-case (52 chars) you&#8217;d need 23 randomly chosen characters and if you add the 0-9 numbers into the mix (62 chars), you&#8217;d still need at least 22 random characters out of that.<br
/> Now you know how weak your password really is compared to the technical implementation of it :-)</p> ]]></content:encoded> </item> <item><title>By: nixcraft</title><link>http://www.cyberciti.biz/tips/howto-protect-account-against-password-crack-attack.html#comment-93662</link> <dc:creator>nixcraft</dc:creator> <pubDate>Mon, 19 Mar 2007 15:19:38 +0000</pubDate> <guid
isPermaLink="false">http://www.cyberciti.biz/tips/howto-protect-account-against-password-crack-attack.html#comment-93662</guid> <description>You cannot decrypt passwords in the /etc/shadow. You  can just encrypt password and compare with /etc/shadow version using API</description> <content:encoded><![CDATA[<p>You cannot decrypt passwords in the /etc/shadow. You  can just encrypt password and compare with /etc/shadow version using API</p> ]]></content:encoded> </item> <item><title>By: amnju</title><link>http://www.cyberciti.biz/tips/howto-protect-account-against-password-crack-attack.html#comment-92098</link> <dc:creator>amnju</dc:creator> <pubDate>Sun, 18 Mar 2007 06:14:07 +0000</pubDate> <guid
isPermaLink="false">http://www.cyberciti.biz/tips/howto-protect-account-against-password-crack-attack.html#comment-92098</guid> <description>hi..
can u reply to my mail how you can decrypt passwords in the /etc/shadow file.....</description> <content:encoded><![CDATA[<p>hi..<br
/> can u reply to my mail how you can decrypt passwords in the /etc/shadow file&#8230;..</p> ]]></content:encoded> </item> </channel> </rss>
