Adam Shostack (adam@homeport.org)
Fri, 26 Jun 1998 11:14:33 -0400 (EDT)
(Forgot to cc the list)
Doesn't bother me in the slightest. I've used the freely available
crackers that accessdata makes. I had this data handy; it took me all
of 2 minutes to find and share.
Adam
acpizer@mach.unseen.org wrote:
| he's making money on your account, maybe it doesn't bother you, but it
| does bother me.
|
| bye,
| acpizer.
|
|
| On Tue, 23 Jun 1998, Adam Shostack wrote:
|
| > Part of doing research is to ensure you're not re-inventing
| > the wheel before you start doing hard work. I'm perfectly happy to
| > have Mike ask questions about this stuff; the answers are often
| > enlightening to the rest of us.
| >
| > Anyway, Access97 passwords are stored in the 13 bytes from offset
| > 0x42 in a .mdb file. Do a bitwise XOR with 0x86, 0xFB, 0xEC, 0x37,
| > 0x5D, 0x44, 0x9C, 0xFA, 0xC6, 0x5E, 0x28, 0xE6, 0x13 to recover the
| > plaintext. I think that if the first byte is 0x86, the password is
| > not checked.
| >
| > Adam
| >
| >
| >
| >
| > acpizer@mach.unseen.org wrote:
| > | You call yourself "Cryptographer / Programmer" but can't figure out how
| > | access' password verification algorithm works?
| > |
| > | You expect everybody to help you, earn your money and do it YOURSELF.
| > |
| > | stop asking stupid questions and do the research on your own.
| > |
| > | signed,
| > | acpizer.
| > |
| > |
| > | On Fri, 19 Jun 1998 staym@accessdata.com wrote:
| > |
| > | > Does anyone know what algorithm MS uses to verify passwords for Access
| > | > 2.0 accounts?
| > | > --
| > | > Mike Stay
| > | > Cryptographer / Programmer
| > | > AccessData Corp.
| > | > mailto:staym@accessdata.com
| > | >
| > |
| >
| >
| > --
| > "It is seldom that liberty of any kind is lost all at once."
| > -Hume
| >
| >
| >
|
-- "It is seldom that liberty of any kind is lost all at once." -Hume----- End of forwarded message from adam -----
-- "It is seldom that liberty of any kind is lost all at once." -Hume
The following archive was created by hippie-mail 7.98617-22 on Fri Aug 21 1998 - 17:19:07 ADT