RE: Rewarding Challenge AS/400

["Ed Davidson" <Edavidson@xxxxxxxxxxxx>]

Doesn't this sound like an intial step to a L0phtcrack for the AS/400?  Add
packet sniffing (easily done) and the ability to run this with QUSER
security and my head will turn.

From Newswire;
* PentaSafe ( http://www.pentasafe.com )releases PS-Password
Manager, an AS/400 password scanning utility. Using a dictionary of
more than 124,000 words, PS-Password Manager scans an AS/400 in
minutes and compiles a report displaying profiles of all users
currently employing weak or easily identified passwords. PS-Password
Manager can shut down the users, force a change of password on the
user's next login, disable the users, or send an automatic message to
the user explaining that the user's password is not secure. The
utility also keeps historical records of each user's last 32
passwords, lets administrators add custom words to the dictionary,
creates a log file that identifies users who chronically pick weak
passwords, and is available in English, French, and German.






 > -----Original Message-----
> > From: Colin Williams [mailto:Williamsc@technocrats.co.uk]
> > Sent: Monday, September 27, 1999 5:03 AM
> > To: 'MIDRANGE-L@midrange.com'
> > Subject: RE: Rewarding Challenge AS/400
> >
> >
> > Haven't you just told everyone how to decrypt as400 passwords?
> >
> > If so, isnt that very irresponsible?
> >


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---