Re:FBI got Hacked, Reveals Hundreds of Passwords
by simias on Saturday October 20, 2012 @02:18PM
(#4677769)
The fact that some of those passwords appear very strong also means they weren't bruteforced and therefore most likely stored in plaintext. I guess even the FBI have sloppy programmers...
Re:FBI got Hacked, Reveals Hundreds of Passwords
by espadrine on Saturday October 20, 2012 @02:24PM
(#4677793)
They say on the pastebin that one connexion sent passwords in clear text (through asipx-webadmin), so they probably were read there. At least it was probably an entry point.
Re:FBI got Hacked, Reveals Hundreds of Passwords
by vibrunazo on Saturday October 20, 2012 @03:03PM
(#4677909)
3 and 4 would not take long to be brute forced by a dictionary attack, I think. Too many people use qwerty on their password, so it's probably high rated on a dictionary attack.
It appears that, in general, the FBI staff are setting reasonable passwords. There are a few passwordNNN types but the majority are adequate and, in my opinion, would hold up well against a brute force vector, which is the primary purpose of password complexity.