Re: tlug: Wrong password worked!

["sundararaman jeyaraman" <sundarman@example.com>]

--
On Tue, 22 Dec 1998 12:12:15   Darren Cook wrote:
>I was just logging in via telnet, and after typing my password I hit
>another key instead of enter. Oh well, backspace just makes matters worse,
>so I press enter anyway.
>
>And it works.
>
>Just to be sure I logged in again, deliberately adding an extra letter to
>the end of the password.
>
>Why does this work? Shorter passwords, or replacing the last letter of the
>password all fail, so I don't suppose this is a security problem.
>
>Darren
>This is not a security problem. In Unix generally and in your case I suppose it is linux, passwords are only eight characters long. Any extra characters after the first eight characters are invalid. For (e.g) lets say your passwd is "abcdefghijkl" linux encrypts only the first eight characters ie abcdefgh and stores it in the /etc/passwd file or any other file (shadow etc). Any characters after the first eight characters are ignored. (eg) abcdefghxxxxxx or abcdefghblablabla will work . Sundararaman <sundarman@example.com>
>-------------------------------------------------------------------
>Next Nomikai: 14 January 1999, 19:30 Tengu TokyoEkiMae 03-3275-3691
>*** it will will be Jan 14 (Thu), as Jan 15 (Fri) is a natl holiday
>Next Technical Meeting: 13 February, 12:30               Place: TBD
>-------------------------------------------------------------------
>more info: http://tlug.linux.or.jp                     Sponsor: PHT
>


Get your FREE Email at http://mailcity.lycos.com
Get your PERSONALIZED START PAGE at http://personal.lycos.com
-------------------------------------------------------------------
Next Nomikai: 14 January 1999, 19:30 Tengu TokyoEkiMae 03-3275-3691
*** it will will be Jan 14 (Thu), as Jan 15 (Fri) is a natl holiday
Next Technical Meeting: 13 February, 12:30               Place: TBD
-------------------------------------------------------------------
more info: http://tlug.linux.or.jp                     Sponsor: PHT