LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 02-15-2013, 02:30 AM   #1
makhan10
LQ Newbie
 
Registered: Apr 2012
Posts: 2

Rep: Reputation: Disabled
cracking open source password programs


as fedora or other linux distribution are open source, so what about the password program which hides uses password /etc/passwd file... can not anybody guess it

forgive me my english is not good

Last edited by makhan10; 02-15-2013 at 02:32 AM.
 
Old 02-15-2013, 02:34 AM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
what about it? Looking at source code shouldn't expose security issues, if it does, then you've written in wrong.

Basically the password hash in /etc/shadow using one way salted cryptography algorithms. How it works is EXTREMELY well documented (feel free to go read) and a corner stone of it is that you can not unencrypt a password ever. So when you compare passwords, you're actually encrypting the password given by the user, with the salt string and comparing the encrypted values, not the original passwords, which no one ever actually records.

btw, a please / thank you wouldn't go amiss next time.
 
Old 02-15-2013, 02:35 AM   #3
makhan10
LQ Newbie
 
Registered: Apr 2012
Posts: 2

Original Poster
Rep: Reputation: Disabled
ok thanks acid_kewpie
 
Old 02-15-2013, 02:58 AM   #4
eSelix
Senior Member
 
Registered: Oct 2009
Location: Wroclaw, Poland
Distribution: Arch, Kubuntu
Posts: 1,281

Rep: Reputation: 320Reputation: 320Reputation: 320Reputation: 320
In addition /etc/shadow has permissions which not allow normal users to read it.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Cracking open five of the best open source easter eggs LXer Syndicated Linux News 0 03-16-2010 01:10 AM
Password-cracking utility jimmyjiang Linux - Software 3 10-22-2009 01:34 PM
medical programs, open source alf_frommars Linux - Software 1 04-11-2006 11:32 AM
theoritical password cracking abunsair Linux - Security 21 07-18-2005 09:57 AM
ssh password cracking dan0r Linux - Security 2 01-10-2005 03:32 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 04:15 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration