RE: Pete Finnigan's Oracle database password checker
Date: Wed, 8 Oct 2008 15:58:58 +0100
Message-ID: <OF75D82DA7.217FC760-ON802574DC.00524DCE-802574DC.00524DD1@morrisonsplc.co.uk>
http://www.red-database-security.com/software/checkpwd.html Provides quite
a lot of information and in the download there is a password/dictionary
file which is quite big and I suspect is similar to the one produced by
Pete Finnegan
The download section of that site also offers some large dictionaries.
The larger the dictionary the longer the compare time required
It is a wonder that Oracle themselves do not produce an test for weak passwords for those accounts that were created prior to password verification being installed.
John
John Hallas
Oracle DBA
Wm Morrison Supermarkets PLC
Mobile: 07876 790540
E-mail: john.hallas_at_morrisonsplc.co.uk
-----oracle-l-bounce_at_freelists.org wrote: -----
To: "Bort, Guillermo" <guillermo.bort_at_eds.com>, John
Hallas/Systems/Morrisons_at_Morrisons
From: "Mercadante, Thomas F (LABOR)" <Thomas.Mercadante_at_labor.state.ny.us>
Sent by: oracle-l-bounce_at_freelists.org
Date: 08/10/2008 02:33PM
cc: <oracle-l_at_freelists.org>
Subject: RE: Pete Finnigan's Oracle database password checker
Guillermo,
I know. But anybody have a clue of where to get a list of dictionary words to load into a database?
Wm Morrison Supermarkets PLC is registered in England with number 358949. The registered office of the company is situated at Gain Lane, Bradford, West Yorkshire BD3 7DL.
This email and any attachments are intended for the addressee(s) only and may be confidential. If you are not the intended recipient, please inform the sender by replying to the email that you have received in error and then destroy the email. If you are not the intended recipient, you must not use, disclose, copy or rely on the email or its attachments in any way.
Wm Morrison Supermarkets PLC accepts no liability or responsibility for anything said in the email or its attachments and gives no warranty as to accuracy. It is the policy of Wm Morrison Supermarkets PLC not to enter into any contractual or other obligations by email.
Although we have taken steps to ensure the email and its attachments are virus-free, we cannot guarantee this or accept any responsibility, and it is the responsibility of recipients to carry out their own virus checks.
-- http://www.freelists.org/webpage/oracle-lReceived on Wed Oct 08 2008 - 09:58:58 CDT