Quote:
Originally Posted by kacir
You can retrieve a password.
Even if it is stored as a one-way hash.
There are numerous programs (such as well known John The Ripper for unix passwords) and services (such as server in Switzerland that has database of hashes for all possible password combinations for Windows computers (there is maximum 26 letters allowed in Windows))
It can't be that difficult to brute-force CC number on a quad-core machine with more than of 4GB RAM
|
Lets say first that the hash is stored. I'm not sure that it is. But, I assume it may be if you can open a 2nd ebook that is encrypted with the same CC/Name without prompting for the info again.
You would have to lose your reader. Someone that knows all this would have to get it. They would need to find a tool that contains a has db. Now, what are the odds that this tool you talk about would have the last 8 digits of a CC# and a persons name in it's rainbow table? I think slim to none.
But, let's even assume it did. All the info that person is going to get will be the last 8 digits of the password and a persons name. Certainly not going to do them much good.
BOb