Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Web-App-Sec
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: MD5 Password encoding (was: Defeating Citi-Bank Virtual Keyboard Pro

from [mike] Network Security [Permanent Link]
Subject: Re: MD5 Password encoding (was: Defeating Citi-Bank Virtual Keyboard Protection)
Date: 17 Aug 2005 00:59:38 -0000 

The purpose of MD5 password encoding has almost nothing to do with protection 
of the password field.

The entire password has to have been entered and stored somewhere before the 
MD5 encryption can be performed. That somewhere can be spied upon. 

MD5 password protection is used to insure that the submitted contents are NOT 
from a bot trying to play a logon attack. It is a sort of CAPTCHA protection 
since the logon must come from logon form on the implemented web site.

Mike
www.sharecube.com
[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  Cookie not expiring..., spawn security
Next by Date:  IT Security World 2005 ???, Saqib Ali
Previous by Thread:  Cookie not expiring..., spawn security
Next by Thread:  Re: MD5 Password encoding (was: Defeating Citi-Bank Virtual Keyboard Protection), Noam Eppel
Indexes:  [Date] [Thread] [Top] [All Lists]