Re: plaintext passwords - my 0.02c

On Wed, 19 Jul 2006 13:45:06 +0300, Saulius Grazulis <grazulis@akl.lt>
wrote:

>Anyone gaining physical access to the disk or its copies
>(backups) will be able to retrieve the stored information, bypassing OS
>autentication, protection of the directories and so on.

This is not always true. A proper encryption scheme will only allow an
individual holding the correct password access to the data, short of a
lengthy brute-force attack.

I believe that this sort of scheme is what is used to store the
passwords on Win32 boxes.

Greg

-- 
This post represents the views of the author and does
not necessarily accurately represent the views of BT.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org