RE: Pete Finnigan's Oracle database password checker

  • From: John.Hallas@xxxxxxxxxxxxxxxxxx
  • To: Thomas.Mercadante@xxxxxxxxxxxxxxxxx
  • Date: Wed, 8 Oct 2008 15:58:58 +0100

http://www.red-database-security.com/software/checkpwd.html Provides quite
a lot of information and in the download there is a password/dictionary
file which is quite big and I suspect is similar to the one produced by
Pete Finnegan

The download section of that site also offers some large dictionaries.

The larger the dictionary the longer the compare time required

It is a wonder that Oracle themselves do not produce an test for weak
passwords for those accounts that were created prior to password
verification being installed.

John




=========================================
John Hallas
Oracle DBA
Wm Morrison Supermarkets PLC
Mobile: 07876 790540
E-mail: john.hallas@xxxxxxxxxxxxxxxxxx



-----oracle-l-bounce@xxxxxxxxxxxxx wrote: -----


To: "Bort, Guillermo" <guillermo.bort@xxxxxxx>, John
Hallas/Systems/Morrisons@Morrisons
From: "Mercadante, Thomas F (LABOR)" <Thomas.Mercadante@xxxxxxxxxxxxxxxxx>
Sent by: oracle-l-bounce@xxxxxxxxxxxxx
Date: 08/10/2008 02:33PM
cc: <oracle-l@xxxxxxxxxxxxx>
Subject: RE: Pete Finnigan's Oracle database password checker

Guillermo,

I know.  But anybody have a clue of where to get a list of dictionary
words to load into a database?


==========================================================================================================================

Wm Morrison Supermarkets PLC is registered in England with number 358949. The 
registered office of the company is situated 
at Gain Lane, Bradford, West Yorkshire BD3 7DL.

This email and any attachments are intended for the addressee(s) only and may 
be confidential. If you are not the
intended recipient, please inform the sender by replying to the email that you 
have received in error and then destroy
the email. If you are not the intended recipient, you must not use, disclose, 
copy or rely on the email or its attachments
in any way.

Wm Morrison Supermarkets PLC accepts no liability or responsibility for 
anything said in the email or its
attachments and gives no warranty as to accuracy. It is the policy of Wm 
Morrison Supermarkets PLC not to enter
into any contractual or other obligations by email.

Although we have taken steps to ensure the email and its attachments are 
virus-free, we cannot guarantee this or
accept any responsibility, and it is the responsibility of recipients to carry 
out their own virus checks.

==========================================================================================================================
--
//www.freelists.org/webpage/oracle-l


Other related posts: