[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20080327113428.GA29504@hack.fi>
Date: Thu, 27 Mar 2008 13:34:28 +0200
From: fgeek@...k.fi (Henri Salo)
To: john-users@...ts.openwall.com
Subject: Re: web api to john like service
Before you do anything you should read and use better tools to force
users to use better (strong) passwords. You can read about such tools in
here: http://www.openwall.com/pam/ and http://www.openwall.com/passwdqc/
After that you could just once force users to change their passwords or
check every hash for weak passwords.
Doing this process you arhieve better password policy and automatically
get rid of most brute force attempts.
On Thu, Mar 27, 2008 at 11:10:07AM +0530, ram wrote:
> Is there a web-api where I can provide a username and crypt password and
> the passwords are show if easily crackable
>
> I have a number of machines with a lot of mail users. Now I see a lot of
> spammers exploiting weak passwords and sending spam.
>
> Running john regularly on all machines is painful , since these machines
> are far too many and scattered across. starting john , and waiting for
> it to finish and then using the results is humanly impossible
>
>
> I wish to run a small utility that will connect to a single server
> upload passwords and filter out all weak accounts
>
> How Can this be done ? Is there some service already that does this
>
> Thanks
> Ram
>
> --
> To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply
> to the automated confirmation request that will be sent to you.
--
To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply
to the automated confirmation request that will be sent to you.
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
