You are missing our premiere tool bar navigation system! Register and use it for FREE!

NukeCops  
•  Home •  Downloads •  Gallery •  Your Account •  Forums • 
Readme First
- Readme First! -

Read and follow the rules, otherwise your posts will be closed
Modules
· Home
· FAQ
· Buy a Theme
· Advertising
· AvantGo
· Bookmarks
· Columbia
· Community
· Donations
· Downloads
· Feedback
· Forums
· PHP-Nuke HOWTO
· Private Messages
· Search
· Statistics
· Stories Archive
· Submit News
· Surveys
· Theme Gallery
· Top
· Topics
· Your Account
Who's Online
There are currently, 360 guest(s) and 0 member(s) that are online.

You are Anonymous user. You can register for free by clicking here
Threshold
The comments are owned by the poster. We aren't responsible for their content.

No Comments Allowed for Anonymous, please register

Re: Dangerous bug or not?!!!! (Score: 1)
by Jeruvy on Thursday, January 15 @ 16:08:21 CET
(User Info | Send a Message)
And I could if I was so evil and inclined, to simply take 1000 zombies and break the md5 brute force into all of the zombies and wait a few days for the results. Does anyone in security understand the ramifications of Distributed Processing Systems? IF it takes A computer ONE YEAR to brute force the hash then 365 computers could brute force it in one day. Not a true fact (As the actual time may decrease or increase depending on the type of system, etc. etc.) but suffice to make the point that truly in today's world even 3DES, let alone MD5, isn't uncrackable.

Protect your passwords...

Now in real life, I'd bet most passwords would simply require a dictionary attack and I could easily have the results in minutes rather than days.

But the point is if I want to break into your computer the MD5 sufficient. Ask the many who've already fell victim to this attack.

J.

P.S. This hack (not a bug) is very old now and well patched for most sites, but I'm sure you knew this.



| Parent
Powered by TOGETHER TEAM srl ITALY http://www.togetherteam.it - DONDELEO E-COMMERCE http://www.DonDeLeo.com - TUTTISU E-COMMERCE http://www.tuttisu.it
Web site engine's code is Copyright © 2002 by PHP-Nuke. All Rights Reserved. PHP-Nuke is Free Software released under the GNU/GPL license.
Page Generation: 0.134 Seconds - 253 pages served in past 5 minutes. Nuke Cops Founded by Paul Laudanski (Zhen-Xjell)
:: FI Theme :: PHP-Nuke theme by coldblooded (www.nukemods.com) ::