I do not want to get into a brawl with Microsoft and quite honestly I do
not have resources (or time) to argue with the boys from Redmond so may
I please ask a question... Am I missing something? If in fact, the
Allison code (ftp://samba.anu.edu.au/pub/samba/pwdump) does not
compromise the security of NT, then I will accept the opinions of this
distinguished forum. However, IMHO the fact that NT SAM has been
compromised is serious enough to merit some corrective action from MS.
So let me ask a question, what are the repercussions of a compromised NT
SAM? Assuming that SAM has been cracked, what can you do? What
possible "attacks" can be achieved? (Please do not post source. I just
want some explainations) I looked at the NTCRACK code and found that a
more expansive dictionary can be added on (as in John Boyer's work). If
I am wrong then I would be more than happy to admit it.
Any thoughts? Please cc: yobie@yobie.com.