Live data from Hacker News

L0phtCrack Is Now Open Source

l0phtcrack.gitlab.io

101–110 of 151 posts

Re: L0phtCrack Is Now Open Source

#101
post #95

Earlier quoted context omitted.

As long as your country allows you to even own the tools...

Which countries don’t?

I have no idea about the global situation, but in Germany there was a lot of discussion when they introduced §202c StGb 15 years ago.

- https://www.schneier.com/blog/archives/2007/08/new_german_ha...

- https://www.gesetze-im-internet.de/stgb/__202c.html

However, it seems it is not about owning the tools, but rather about creating them.

Re: L0phtCrack Is Now Open Source

#102
post #76

Earlier quoted context omitted.

Congrats, how did you do it?

Combination of 401k growth, having a six figure income, cryptocurrency investments, and early investment in AMD and TSLA and a few side income streams.

Sounds like you owe your success more to WallStreetBets than hacking.

Re: L0phtCrack Is Now Open Source

#103
post #20

I wonder what the reasoning for open sourcing it now. And why not from the get go instead of decades later. Licence choices are obviously up to the authors. But at this point it is more a museum relic than anything practical

The rights to L0phtCrack were purchased about a year ago by a company that made password cracking rigs for large companies to audit their employees passwords. They filed bankruptcy due to the GPU shortage changing their COGS overnight. When payments stopped being made the license reverted back to the author and he open sourced it.

Re: L0phtCrack Is Now Open Source

#106
post #105

I recall running this on a dual core Celron (BP6 dual socket motherboard) over-clocked back in the day to get 1Ghz `testing` power. Fun times.

Ah I remember that setup. The fact that 'normal' people could actually afford a 1Ghz computer was mind blowing.

Re: L0phtCrack Is Now Open Source

#107

L0phtCrack was featured in the Phrack Magazine (53) inside an article written by Aleph1 on attacking PPTP, one of the oldest VPN protocols [1]. Prior to that, Aleph1 has written arguably the most famous article in Phrack Magazine (49) to date [2]. [1] The Crumbling Tunnel: http://phrack.org/issues/53/12.html [2] Smashing The Stack For Fun And Profit: http://phrack.org/issues/49/14.html

Aleph1 has written arguably the most famous article in Phrack Magazine

Given the number of people, including myself, who consider reading that article a truly formative experiences, you might argue it's one of the most famous/influential articles in programming.

Re: L0phtCrack Is Now Open Source

#108

Earlier quoted context omitted.

I have been following programming and technology for decades and I had never heard of it. Every project should have a concise (one or two sentence) description in the GitHub README and the website's homepage. Even the most well-known tools.

I agree they should have a description in the readme, as a courtesy if nothing else. But L0phtCrack is a very well known tool. If you've never heard of it and have been following security stuff for decades, that's really on you.

What do you mean by "that's really on you"? I'd normally interpret it as something like... "this is a state of affairs that would be different if you'd acted differently, and you knew or could have been able to know this in advance". Along those lines, anyway. But not having heard about a tool doesn't really seem to fit that.

Re: L0phtCrack Is Now Open Source

#109
post #94

Earlier quoted context omitted.

But which ones are really setup by the NSA to get said evidence that will be inconvenient for him at some point in the future? (I suspect Tor, and at least a few of the commercial VPN providers)

Some recent news out of the commercial VPN universe... From a cryptographer professor at Johns Hopkins: https://twitter.com/matthew_d_green/status/14493567426896896... Kape, an Israeli 'adware' company that renamed itself to distance itself from its prior history as an adware company, recently bought up ExpressVPN and several other services and rebranded itself as a VPN services company. Kape also bought VPN ranking…

The CryptoAG story is super interesting for seeing how super powers handle the issue, thx for the wikipedia.

Re: L0phtCrack Is Now Open Source

#110

> L0phtCrack is a password auditing and recovery application originally produced by Mudge from L0pht Heavy Industries. It is used to test password strength and sometimes to recover lost Microsoft Windows passwords, by using dictionary, brute-force, hybrid attacks, and rainbow tables. - Wikipedia

[deleted]
Post reply on HN