Default encrypted passwords

[Gerald (Jerry) Carter]

On Thu, 27 Sep 2001, John E. Malmberg wrote:

> Removing the plain text passwords from an SMB network only eliminates
> the probability that someone could use those same passwords to attack
> other protocols.

Also I should point that NTLMv1 is vunerable to man-in-the-middle
attacks :-)




cheers, jerry
 ---------------------------------------------------------------------
 www.samba.org              SAMBA Team              jerry_at_samba.org
 www.plainjoe.org                                jerry_at_plainjoe.org
 --"I never saved anything for the swim back." Ethan Hawk in Gattaca--