Hi,How can people crack a password from an id file exactly?
I would like to demonstrate that a simple password can be easily cracked.
How exactly is this done?
Subject: How exactly can people crack a password from an id file?
I’m yet to see any programmatic cracking of a Notes ID. Do you feel there is a genuine “crack” out there?
Password quality on the other hand is a whole 'nother subject and doesnt apply just to Notes IDs.
Subject: How exactly can people crack a password from an id file?
a simple password cannot easily be cracked …it can easily be guessed !
Subject: I beg to differ…
check out a product called Lotus Notes Key
Subject: RE: I beg to differ…
I think what Joris was getting at is that there is no way to derive the password from the content of the id. The Key product does the “guessing” for you, far faster and better than you could do it yourself. It all depends on what one understands “cracking” to mean, I guess.
Subject: How exactly can people crack a password from an id file?
I don’t think you can “crack” the ID, as (AFAIK) the password is not stored in the *.id file at all.
The password that someone types in is run through an algorithm (one-way I suspect) and the result is stored in the ID file. This is duplicated when someone is prompted for their password.
If all of that is true, then you cannot start with an ID file and calculate the original password.