Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.system > #57597

Re: File vault, firmware password, etc

Path csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!news.glorb.com!news.linkpendium.com!news.linkpendium.com!panix!MIX!Blackbird
From billy@MIX.COM
Newsgroups comp.sys.mac.system
Subject Re: File vault, firmware password, etc
Date Wed, 5 Mar 2014 00:10:35 +0000 (UTC)
Organization PANIX Public Access Internet and UNIX, NYC
Lines 30
Message-ID <lf5q1r$sgg$1@reader2.panix.com> (permalink)
References <1lhxa48.1f825xadchjy0N%dcohenspam@talktalk.net> <slrnlh9a6u.8tb.g.kreme@oswin.local> <lf2a1p$ctt$1@dont-email.me> <1lhy0z9.14ckl23s2zi6eN%dcohenspam@talktalk.net> <lf357m$f0j$1@dont-email.me> <1lhz47z.6egrs36m8eomN%dcohenspam@talktalk.net> <lf59na$lrb$2@dont-email.me> <1li03ur.1x7dzq8typoudN%dcohenspam@talktalk.net> <bnmvjkFbrt0U1@mid.individual.net> <slrnlhckmq.29qh.g.kreme@amelia.local> <lf5knj$d8b$1@reader2.panix.com> <slrnlhco9h.2b8q.g.kreme@amelia.local>
NNTP-Posting-Host panix5.panix.com
X-Trace reader2.panix.com 1393978235 29200 166.84.1.5 (5 Mar 2014 00:10:35 GMT)
X-Complaints-To abuse@panix.com
NNTP-Posting-Date Wed, 5 Mar 2014 00:10:35 +0000 (UTC)
Xref csiph.com comp.sys.mac.system:57597

Show key headers only | View raw

Lewis <g.kreme@gmail.com.dontsendmecopies> writes:

> For example, you may be able to try 1,000,000 passwords a second against a
> filevault volume, or because of the way the password is queried, you may be
> able to only try 1,000 a second. If you are 'rate-limited' to 1,000 a second,
> then a 'weak' password is now much much stronger than it was.

Well, it's somewhat rate-limited due to the 1000s of trips through hashing.
But, probably not so much with today's hardware.

> Locking users out of accounts after too many failed attempts doesn't really
> work in the real world.
> 
> "I'm sorry Dave, i can't allow you to try to use your own computer you
> purchased with your own hardware for the next 15 minuts because the cat walked
> on the keyboard. Oh, the cat walked on the keyboard again, you're now locked
> out for 24 hours."

There are those who agree with you, but I'm not one of them.  Seeing
something like this doesn't bother me at all...

    Last interactive login on Wednesday,  2-JUN-2010 11:06:17.08
    Last non-interactive login on Wednesday,  2-JUN-2010 15:24:30.13
      771 login failures since last successful login

Billy Y..
-- 
        sub     #'9+1   ,r0             ; convert ascii byte
	add     #9.+1   ,r0             ; to an integer
	bcc     20$                     ; not a number

Back to comp.sys.mac.system | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

File vault, firmware password, etc dcohenspam@talktalk.net (Daniel Cohen) - 2014-03-03 08:57 +0000
  Re: File vault, firmware password, etc Tom Stiller <clusterfux.upmon@gmail.com> - 2014-03-03 13:20 +0000
    Re: File vault, firmware password, etc Jolly Roger <jollyroger@pobox.com> - 2014-03-03 15:13 +0000
      Re: File vault, firmware password, etc Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-03-03 16:07 +0000
        Re: File vault, firmware password, etc me@home.spamsucks.ca (Király) - 2014-03-03 16:19 +0000
          Re: File vault, firmware password, etc dcohenspam@talktalk.net (Daniel Cohen) - 2014-03-03 17:57 +0000
            Re: File vault, firmware password, etc me@home.spamsucks.ca (Király) - 2014-03-04 00:03 +0000
              Re: File vault, firmware password, etc dcohenspam@talktalk.net (Daniel Cohen) - 2014-03-04 12:08 +0000
                Re: File vault, firmware password, etc me@home.spamsucks.ca (Király) - 2014-03-04 19:31 +0000
                Re: File vault, firmware password, etc dcohenspam@talktalk.net (Daniel Cohen) - 2014-03-04 20:46 +0000
                Re: File vault, firmware password, etc Tom Stiller <clusterfux.upmon@gmail.com> - 2014-03-04 21:41 +0000
                Re: File vault, firmware password, etc nospam <nospam@nospam.invalid> - 2014-03-04 17:01 -0500
                Re: File vault, firmware password, etc dcohenspam@talktalk.net (Daniel Cohen) - 2014-03-04 23:09 +0000
                Re: File vault, firmware password, etc Jolly Roger <jollyroger@pobox.com> - 2014-03-04 22:06 +0000
                Re: File vault, firmware password, etc Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-03-04 22:25 +0000
                Re: File vault, firmware password, etc billy@MIX.COM - 2014-03-04 22:39 +0000
                Re: File vault, firmware password, etc Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-03-04 23:26 +0000
                Re: File vault, firmware password, etc billy@MIX.COM - 2014-03-05 00:10 +0000
                Re: File vault, firmware password, etc billy@MIX.COM - 2014-03-04 21:48 +0000
                Re: File vault, firmware password, etc dcohenspam@talktalk.net (Daniel Cohen) - 2014-03-04 23:09 +0000
        Re: File vault, firmware password, etc Jolly Roger <jollyroger@pobox.com> - 2014-03-03 16:25 +0000
      Re: File vault, firmware password, etc billy@MIX.COM - 2014-03-03 17:05 +0000
        Re: File vault, firmware password, etc Jolly Roger <jollyroger@pobox.com> - 2014-03-03 17:10 +0000
        Re: File vault, firmware password, etc billy@MIX.COM - 2014-03-05 18:22 +0000
          Re: File vault, firmware password, etc Jolly Roger <jollyroger@pobox.com> - 2014-03-05 18:28 +0000
    Re: File vault, firmware password, etc dcohenspam@talktalk.net (Daniel Cohen) - 2014-03-03 17:57 +0000
      Re: File vault, firmware password, etc Tom Stiller <clusterfux.upmon@gmail.com> - 2014-03-03 19:11 +0000
  Re: File vault, firmware password, etc Alan Browne <alan.browne@FreelunchVideotron.ca> - 2014-03-04 17:10 -0500

csiph-web