Hey guys

I apologise if this seems like a stupid Q to you.

I read somewhere, that if you're running a password cracking program on a system with good security, pgp, whatever, you only have three attempts to get it right. Is this so? If yes, is there ways to get around it?

Thanks alot

3 is arbitrary. It could be any number, even 1 try on super secure systems. It is an accepted standard to use 3 tries before the account is locked.

You are talking about running a brute force attack against login daemons. This will not work on any decent UNIX box, even any decent windows box at that. You can only brute force something that will let you try unlimited amounts of time.

Ways to get around it: endless.

Any other applicable exploit can be used when brute forcing is not an option. "Hacking" encompasses finding/discovering these exploits among other things... you might be missing the concept. Just because that method won't work, does not mean other (possibly wildly different) methods won't.

[This message has been edited by cense (edited 10-08-2002).]

Thanks Cense, yep that pretty much answers my question.

I do have way more specific ones - in no way related to me attempting to hack/crack/phreak/whatever, - but actually related to fiction.

Maybe I could email you with some stuff?

Geez, this forum's a bit slow eh? Or is it just that time of day?

hey, nobody must reply. Especially not to a question like "do cars drive faster than 55mph?" ...

:-(