Ken Thompson Unix Password

Mararka qaarkood 2014, gudaha BSD 3 qashinka geedaha, waxaan helay faylka / etc / passwd oo wata ereyada sirta ah ee dhammaan mujaahidiinta sida Dennis Ritchie, Ken Thompson, Brian W. Kernighan, Steve Born iyo Bill Joy.

Xashiishyadan, algorithm-ka ayaa la isticmaalay crypt (3) ku salaysan DES - oo loo yaqaan daciifnimadeeda (iyo dhererka erayga sirta ah ee ugu badan ee 8 xaraf). Markaa waxaan mooday inay fududaan lahayd in la furo furayaashan sirta ah ee madadaalada ah.

Waxaan qaadanaa bruter caadiga ah John ΠΈ xashiish.

Si dhakhso leh, waxaan jebiyay ereyo badan oo sirta ah, kuwaas oo intooda badan aad u daciif ahaa (si cajiib ah, bwk ayaa isticmaalay erayga sirta ah /.,/.,, - Way fududahay in lagu qoro kiiboodhka QWERTY).

Laakin erayga sirta ah ee Ken waxa uu ahaa mid aan la jabin karin. Xitaa raadinta dhamman xarfaha yaryar iyo lambarada (dhowr maalmood ee 2014) ma aysan bixin natiijo. Maadaama algorithm-ka ay sameeyeen Ken Thompson iyo Robert Morris, waxaan la yaabanahay waa maxay arrintu. Waxaan sidoo kale xaqiiqsaday in, marka la barbar dhigo nidaamyada kale ee hashing-ka sirta ah sida NTLM, crypt(3) aad ayuu u gaabiyaa xoog wax-ku-ool ah (laga yaabee in aan la hagaajin).

Miyuu isticmaalay xarfo waaweyn ama xitaa xarfo gaar ah? (Awood buuxda oo 7-bit ah waxay ku qaadan doontaa laba sano GPU casri ah).

Horraantii Oktoobar, mawduucan mar kale kiciyey liiska boostada Ururka Unix Heritage Society, iyo aniga la wadaagtay natiijooyinkeeda iyo niyad jab ah in ay jabin kari wayday erayga sirta ah ee Ken.

Ugu dambeyntii, maanta Nigel Williams ayaa shaaca ka qaaday sirtan:

Ka: Nigel Williams[emailka waa la ilaaliyay]>
Mawduuca: Re: [TUHS] Soo celinta /etc/passwd faylasha

Ken waa diyaar

ZghOT0eRm4U9s:p/q2-q4!

Waxay ku qaadatay in ka badan afar maalmood AMD Radeon Vega64 ee hashcat qiyaastii 930MH/s (kuwa og in xashiishku is beddelo oo hoos u dhaco dhammaadka).

Tani waa tii ugu horeysay ee laba jibbaaran oo la soo galo tilmaamid oo bilow furayaal badan oo caadi ah, kaas oo aad ugu habboon Sooyaalka shaxanka kombiyuutarka ee Ken Thompson.

Aad ayaan ugu faraxsanahay in sirta la xalliyay, natiijaduna aad bay u faraxsan tahay.

Source: www.habr.com

Add a comment