changing md5 hashed for sha

Wojciech Puchar wojtek at wojtek.tensor.gdynia.pl
Sat Jun 23 14:09:43 UTC 2012


>>> been recommended changing md5 for something more secure in the
>>> sense of being more expensive to crack.
>>
>> is md5 that easy to crack?
>
> It has been discussed recently, cf
> http://lists.freebsd.org/pipermail/freebsd-security/2012-June/006271.html
> or virtually the first half of
> http://lists.freebsd.org/pipermail/freebsd-security/2012-June/thread.html
>
wasn't aware md5 is really risky. thanks.
anyway - as long as someone don't actually get /etc/master.passwd it 
doesn't matter, it could be even plaintext here.

If someone can get /etc/master.passwd then he/she most probably already 
got root priviledge :)


More information about the freebsd-questions mailing list