Skip site navigation (1) Skip section navigation (2)

Re: PostgreSQL Password Cracker

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Devrim GUNDUZ <devrim(at)tr(dot)net>
Cc: pgsql-hackers(at)postgresql(dot)org
Subject: Re: PostgreSQL Password Cracker
Date: 2002-12-31 17:38:29
Message-ID: 1148.1041356309@sss.pgh.pa.us (view raw or flat)
Thread:
Lists: pgsql-hackers
Devrim GUNDUZ <devrim(at)tr(dot)net> writes:
> Some guys from Turkey claim that they have a code to crack PostgreSQL
> passwords, defined in pg_hba.conf .

> http://www.core.gen.tr/pgcrack/

This is not a cracker, this is just a brute-force "try all possible
passwords" search program (and a pretty simplistic one at that).
I'd say all this proves is the importance of choosing a good password.
Using only lowercase letters is a *bad* idea, especially if you're only
going to use five of 'em...

			regards, tom lane

In response to

Responses

pgsql-hackers by date

Next:From: Tom LaneDate: 2002-12-31 17:41:51
Subject: Re: Bug in Dependencies Code in 7.3.x?
Previous:From: Bruce MomjianDate: 2002-12-31 17:32:07
Subject: Re: Bug in Dependencies Code in 7.3.x?

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group