Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Tue 20 Aug 2019, 18:22
All times are UTC - 4
 Forum index » Off-Topic Area » Security
ErsatzPassword
Post new topic   Reply to topic View previous topic :: View next topic
Page 1 of 1 [12 Posts]  
Author Message
labbe5

Joined: 13 Nov 2013
Posts: 1885
Location: Canada

PostPosted: Fri 22 May 2015, 13:26    Post subject:  ErsatzPassword
Subject description: Ending Password Cracking
 

Because data breaches are a recurring problem, ErsatzPassword could become a standard tool in business organisations. This tool will not prevent data breaches per se, but in case a data breach occurs, hackers will not be able to crack any real and usable passwords, it only will be fake ones. The technical details are in the research report. It is available here :
https://github.com/cngutierr/ErsatzPassword
I guess one of the early users will be banks because of the extra layer of security.
Back to top
View user's profile Send private message 
Flash
Official Dog Handler


Joined: 04 May 2005
Posts: 13283
Location: Arizona USA

PostPosted: Fri 22 May 2015, 16:26    Post subject:  

Do you trust that site? There are several easy English words misspelled in the description, which leads me to suspect that something nefarious could be afoot.
Back to top
View user's profile Send private message 
Ted Dog


Joined: 13 Sep 2005
Posts: 4013
Location: Heart of Texas

PostPosted: Fri 22 May 2015, 22:35    Post subject:  

the word means fake or substandard replacement.
Back to top
View user's profile Send private message 
L18L

Joined: 19 Jun 2010
Posts: 3449
Location: www.eussenheim.de/

PostPosted: Sat 23 May 2015, 04:23    Post subject:  

Flash wrote:
There are several easy English words misspelled in the description,

As I don't have a spell checker at the moment, give me just two examples please. Wink

Thank you.
Back to top
View user's profile Send private message 
Burn_IT


Joined: 12 Aug 2006
Posts: 3525
Location: Tamworth UK

PostPosted: Sat 23 May 2015, 11:43    Post subject:  

cleaver revieled

It is not a well written site and given that, would you trust the software??

I certain would not.

Mind you, I don't trust ANY software that "adjusts" passwords; the whole point of which is to keep them secret not "trust" to some third party.

Last edited by Burn_IT on Sat 23 May 2015, 11:48; edited 1 time in total
Back to top
View user's profile Send private message 
Flash
Official Dog Handler


Joined: 04 May 2005
Posts: 13283
Location: Arizona USA

PostPosted: Sat 23 May 2015, 11:46    Post subject:  

Quote:
ErsatzPassword is a PAM_UNIX module that utlizes (utilizes?) the Yubikey HSM to generate cryptographic password hashes in a cleaver (probably meant clever) way. If an attacker steals the hashed password file (e.g., etc/shadow, /etc/master.passwd) and attempts to crack the password via a dictionary bruteforce attack, the ersatz “fake” passwords are revieled (probably should be revealed) rather than the true password. The detailed design of this tool can be found in here.
Back to top
View user's profile Send private message 
amigo

Joined: 02 Apr 2007
Posts: 2647

PostPosted: Sat 23 May 2015, 12:12    Post subject:  

ersatz has no connotation of being inferior or fake. It simply means 'substitute' or replacement.
Back to top
View user's profile Send private message 
Burn_IT


Joined: 12 Aug 2006
Posts: 3525
Location: Tamworth UK

PostPosted: Sat 23 May 2015, 12:46    Post subject:  

Substitute or replacement both mean NOT original or "copy" or fake??
Fake does not necessarily imply inferior.

_________________
"Just think of it as leaving early to avoid the rush" - T Pratchett
Back to top
View user's profile Send private message 
amigo

Joined: 02 Apr 2007
Posts: 2647

PostPosted: Sat 23 May 2015, 13:47    Post subject:  

I don't recall ever hearing the word fake used in an non-negative way.
Back to top
View user's profile Send private message 
Burn_IT


Joined: 12 Aug 2006
Posts: 3525
Location: Tamworth UK

PostPosted: Sat 23 May 2015, 15:01    Post subject:  

I think a lot of women would argue with that.
_________________
"Just think of it as leaving early to avoid the rush" - T Pratchett
Back to top
View user's profile Send private message 
bark_bark_bark

Joined: 05 Jun 2012
Posts: 1935
Location: Wisconsin USA

PostPosted: Sat 23 May 2015, 15:48    Post subject:  

amigo wrote:
I don't recall ever hearing the word fake used in an non-negative way.


ಠ_ಠ

_________________
....
Back to top
View user's profile Send private message 
L18L

Joined: 19 Jun 2010
Posts: 3449
Location: www.eussenheim.de/

PostPosted: Sun 24 May 2015, 04:14    Post subject:  

Thank you, Flash and Burn_IT for showing the misspelled words.

Totally agreed with you:
Flawless spelling is a necessary condition but not sufficient. Laughing
Back to top
View user's profile Send private message 
Display posts from previous:   Sort by:   
Page 1 of 1 [12 Posts]  
Post new topic   Reply to topic View previous topic :: View next topic
 Forum index » Off-Topic Area » Security
Jump to:  

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.0429s ][ Queries: 11 (0.0065s) ][ GZIP on ]