You are dreaming if you think anyone is going to read that, it's a friggin book! What you do is, at work, run LC4 and let it sniff passwords over the network and crack them as it gets them, then show them how quick it gets all their passwords.

Then they can laugh at you and tell you that if you were running NTLMv2 in the first place like you are supposed to, it wouldn't be as much of an issue, and then "beer" would be a perfectly acceptable password (assuming they weren't an alcoholic).

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/245/26442#26442