🚀 go-pugleaf

"Sundial Services" <info@sundialservices.com> skrev i melding
news:3A149202.77DA@sundialservices.com...
> You need to encrypt the data.  This means scrambling the data in such
a
> way that it can only be recovered if you know the 'one and only one'
key
> that will decrypt it.  Without that key, the information is worthless.

This is one of the most paradox-al facts about computers and security:
- Whenever I get back to a customer a few years later, the very same old
password is still valid. They may have installed firewalls or whatever,
but don't care about whether I get drunk and tell anyone the admin
password so that a crook has got all he needs...

128 bit encryption, my a....;-)

Part from that (which isn't your fault, anyway), a well written,
informative tech-tip !

A (little) tech tip on the very same topic: Whenever a key is to be
checked, add (if possible) a noticeable delay, or use an algoritm that
involves a *lot* of processing. if checking 1 key value takes 1 second,
a hacker will only be able to test for 3600 keys / hour....
I once created a password cracker for Paradox. Checking one password at
a time was hopelessly slow. I seem to remember being able to check 200
passwords in one pass, this speeded up a *lot*. Anyway, it was too slow
to crack more than 5-char pwds...;-)
--
Bjoerge Saether
Consultant / Developer
Asker, Norway
bsaether.removethis@online.no (remove the obvious)