575 attacks on password files. It protects people who have the |
575 attacks on password files. It protects people who have the |
576 same passwords on multiple machines. But it does not protect |
576 same passwords on multiple machines. But it does not protect |
577 against a focused attack against a single password and also |
577 against a focused attack against a single password and also |
578 does not make poorly chosen passwords any better. Still the |
578 does not make poorly chosen passwords any better. Still the |
579 moral is that you should never store passwords in plain text. |
579 moral is that you should never store passwords in plain text. |
580 Never ever.\medskip |
580 Never ever. |
581 |
581 |
582 \noindent |
582 \subsubsection*{Further Reading} |
583 If you want to know more about passwords I recommend viewing some |
583 |
584 youtube videos from the PasswordCon(ference) which takes place each |
584 If you want to know more about passwords I recommend viewing |
585 year. The book by Bruce Schneier about Applied Cryptography is also |
585 some youtube videos from the PasswordCon(ference) which takes |
586 recommendable, though quite expensive. Clearly, passwords are a |
586 place each year. The book by Bruce Schneier about Applied |
587 technology that comes to the end of its usefulness, because brute |
587 Cryptography is also recommendable, though quite expensive. |
588 force attacks become more and more powerful and it is unlikely that |
588 There is also another expensive book about penetration |
589 humans get any better in remembering (securely) longer and longer |
589 testing, but the readable chapter about passwords (Chapter 9) |
590 passwords. The big question is which technology can replace |
590 is free: |
591 passwords\ldots |
591 |
592 \end{document} |
592 \begin{center} |
|
593 \url{http://www.nostarch.com/pentesting} |
|
594 \end{center} |
|
595 |
|
596 \noindent Clearly, passwords are a technology that comes to |
|
597 the end of its usefulness, because brute force attacks become |
|
598 more and more powerful and it is unlikely that humans get any |
|
599 better in remembering (securely) longer and longer passwords. |
|
600 The big question is which technology can replace |
|
601 passwords\ldots \end{document} |
593 |
602 |
594 %%% Local Variables: |
603 %%% Local Variables: |
595 %%% mode: latex |
604 %%% mode: latex |
596 %%% TeX-master: t |
605 %%% TeX-master: t |
597 %%% End: |
606 %%% End: |