cracking

After the linkedin password hash leak, I've been looking at our password hashing. We using Django 1.4 which uses PBKDF2, which is great and a step up from the previous SHA1. However I'm curious how easily one could brute force that. I'm looking at our password complexity rules, and am wondering how fast it'd take to do (say) 8 length lower case ascii letters. This guide to cracking the LinkedIn password hash, has someone doing 430 million sha1 hashes per second on a GPU. http://erratasec.blogspot.ie/2012/06/linkedin-vs-password-cracking.html What kinda speeds would you get for PBKDF2? Does

I'm building a blacklisting service for cracked iPhone apps and I am curious if I missed a method for detecting cracked apps. In the moment following app crack detection methods are available for the service: checking plist size checking signer identity checking if binary is crypted (not sure if this is working correctly since no cracked app got detected this way) checking modified date of info.plist against modified date of package (not sure if this is working - used code like: http://snippie.net/snip/f7530ff2 to do that) I also wonder if it is possible to check if the device is jailbroken?

This is a problem we all have to consider at some point. After many years and many approaches I tend to agree in general with the staterment: "For any protected software used by more than a few hundred people, you can find a cracked version. So far, every protection scheme can be tampered with." Does your employer enforce the use of anti-piracy software? Further, every time I post about this subject, some one will remind me; "First of all, no matter what kind of protection you'll employ,a truly dedicated cracker will, eventually, get through all of the protective barriers." What's the best

I have database of firebird of more than 8 GB and I want to migrate all the data from it. But I have forgotten the username and password. Is there anyway or any tool through which I can crack this database and can get my data back? In most Firebird setups, the username and password is kept in a central security database (security3.fdb in the case of Firebird 3). If you don't know the username and password of a user anymore, you have the following options. Be aware, this answer uses Firebird 3 as its base, but most options also apply to Firebird 2.5 and earlier. Instead of security3.fdb , use

Is there any way of detecting that a debugger is running in memory? and here comes the on Form Load pseudocode. if debugger.IsRunning then Application.exit end if Edit: The original title was "Detecting an in memory debugger" Try the following if ( System.Diagnostics.Debugger.IsAttached ) { ... } Two things to keep in mind before using this to close an application running in the debugger: I've used a debugger to pull a crash trace from a commercial .NET application and send it to the company where it was subsequently fixed with a thank you for making it easy and That check can be trivially

I have $0.99 iOS app and I'm afraid someone would like to crack it. How can I protect my app from crackers? It's very easy with little class, which I implemented: https://github.com/itruf/crackify Just import Crackify.h and check: BOOL cracked = [Crackify isCracked]; these are some check list to check whether your app is cracked. checking plist size checking signer identity checking if binary is crypted checking modified date of info.plist against modified date of package If it's in the store it likely already has been cracked. I wouldn't waste your time trying to combat pirates, no-one has