Article View: comp.security.misc
Article #43Re: GNU su doesn't restrict root access? Why?
From: John F. Haugh II
Date: Tue, 03 Nov 1992 14:04
Date: Tue, 03 Nov 1992 14:04
16 lines
1527 bytes
1527 bytes
In article <720491579snx@Nemesys.demon.co.uk> gvm@nemesys.demon.co.uk (Granville Moore) writes: >Aren't you assuming that you can check each dictionary word against >the list of 10 encrypted passwords in the same amount of time as you can >check it against 1 encrypted password? This isn't the case with Unix, >since the `salt' used in the encryption process means that the encryption >will (in the vast majority of cases) have to be performed 10 times. Without addressing the other issue, there is no assurance that the salts will be different. The odds are much better that 1 in 4096 (or even 10 in 4096) that two will be the same (It's about 1 in 75) assuming salts are completely random. And if you have a non-distributed system as the earlier poster does, it's quite possible that each system has a different salt for each encrypted password ... -- John F. Haugh II [ TSAKC ] !'s: ...!cs.utexas.edu!rpp386!jfh Ma Bell: (512) 251-2151 [ DoF #17 ] @'s: jfh@rpp386.cactus.org
Technical Details
Message-ID:
<21805@rpp386.lonestar.org>Path:
arc1-ca.pugleaf.net!sparky!uunet!cs.utexas.edu!chinacat!rpp386!jfhReferences:
<21772@rpp386.lonestar.org> <720491579snx@Nemesys.demon.co.uk>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!cs.utexas.edu!chinacat!rpp386!jfh From: jfh@rpp386.lonestar.org (John F. Haugh II) Newsgroups: comp.security.misc Subject: Re: GNU su doesn't restrict root access? Why? Message-ID: <21805@rpp386.lonestar.org> Date: 3 Nov 92 14:04:00 GMT References: <21772@rpp386.lonestar.org> <720491579snx@Nemesys.demon.co.uk> Reply-To: jfh@rpp386.cactus.org (John F. Haugh II) Distribution: world Organization: Los Tejanos SCUBA Club and Beer Joint, Austin, Tejas Lines: 16