|
Message-ID: <CA+E3k90Eb9tCop28UdJdBAiOgfiU5wo4Gnc3QtaR4Bhqgqd6Jg@mail.gmail.com>
Date: Fri, 21 Aug 2015 04:42:10 -0800
From: Royce Williams <royce@...ho.org>
To: john-dev <john-dev@...ts.openwall.com>
Subject: Re: JtR encoding help needed
On Fri, Aug 21, 2015 at 12:58 AM, Shinnok <admin@...nnok.com> wrote:
>
> On Aug 21, 2015, at 3:53 AM, Rich Rumble <richrumble@...il.com> wrote:
>
> On Thu, Aug 20, 2015 at 6:14 AM, Frank Dittrich <
> frank.dittrich@...lbox.org> wrote:
>
>> On 08/20/2015 10:08 AM, Shinnok wrote:
>> > I think Frank asked for this in one of his Johnny reviews? Frank, have
>> you ever encountered non-printable ASCII in passwords, maybe just in
>> contests?
>>
>> I only remember I noticed that when a user had a single space character
>> (' ') as a password, the UI wouldn't let me know that the password had
>> been cracked, because that line looked exactly like the lines of
>> uncracked passwords.
>>
> FWIW I use, and have encouraged others to use alt+255 in their passwords.
> It looks like space but isn't :) LM and NTLM have allowed it ever since I
> can remember.
>
>
> The resolution
> https://github.com/shinnok/johnny/issues/46#issuecomment-133005043
>
>
Will there be a visual indicator to show that using the optional hex button
is needed?
Royce
Content of type "text/html" skipped
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.