Re: Passwords stored by Firefox

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Allegedly, on or about 15 February 2015, g sent:
> a few years ago +1 day, when i needed to find password for a client
> running w98se, that had an employee leave. he actually was fired and
> when asked for his password, he supplied wrong password.
> 
> granted, with w98se, such was not a great problem, except that he
> had also encrypted a lot of files.
> 
> on a hunch, to see if he used same password for encrypted files, i
> ran a web search to see what was available to recover his password,
> and i found: Austrumi 0.9.2 iso and burned it to a cd.
> 
>   http://cyti.latgola.lv/ruuni/
>   ftp://austrumi.ru.lv/
> 
>   https://en.wikipedia.org/wiki/Austrumi_Linux
>   http://distrowatch.com/table.php?distribution=austrumi
> 
> on boot, it presents a list of options, among them is password
> recovery for oos, which i ran and recovered his password. after
> login, i found encryption program he used, ran it using his login
> password and obtained access to files.

Well if you use a crappy encryption technique, it doesn't matter how
good your password is, if you have a technique to be able to reverse
engineer it (which is entirely different from just throwing passwords at
some remote service which only gives you a pass/fail result
interface).  

Windows was well known for poor security, especially back then.  And
that is just one reason why you don't use the same password in multiple
places.

There are plenty of things with bad encryption, or the program that
controls it can be subverted.

-- 
[tim@localhost ~]$ uname -rsvp
Linux 3.9.10-100.fc17.x86_64 #1 SMP Sun Jul 14 01:31:27 UTC 2013 x86_64

All mail to my mailbox is automatically deleted, there is no point
trying to privately email me, I will only read messages posted to the
public lists.

George Orwell's '1984' was supposed to be a warning against tyranny, not
a set of instructions for supposedly democratic governments.

ZNQR LBH YBBX



-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org




[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux