Some have asked that because I've pick on MacWorld am I a MacHead? The answer is no, but I do like Apple products. This will be a fun movie to see as there certainly is a cult of Mac, especially here in the Bay Area.
Last year at this time I disclosed an issue with the IDG/MacWorld Expo registration that allowed people Free Platinum Passes (valued at $1,695). I communicated this issue with IDG the week of MacWorld and they removed all the codes, fixed the site, and said thanks. Questions were asked on how to write better code and I gave them a few tips (don't trust user input, don't give your secret codes to everyone, encryption is not one-way, etc). Did they listen?
Nope.
Who wants to stand in line to see the Steve Jobs keynote at MacWorld? I mean have you SEEN the lines there? Really? I want to know WHATS IN THE AIR(tm)!!!
Honestly it's academic to me. I didn't even go to the keynote. :P
Getting Your Golden (Well, Blue) Ticket:
This year the cost of Platinum Passes has gone up to $1,895. That's a lot of money but you get a lot of cool things:
((69^8)/30M) / 60 = 285,443.54 minutes (3.68 months!)Changing l for different lengths and the time changes accordingly:
((69^7)/30M) / 60 = 4,136.86 minutes for 7 charsand so on. . . The time is cumulative and those are just my numbers. Some have found ways to increase the speed to 1 billion cracks-per-second. Until that code is released or we write our own, we have to work with clusters of machines to reach that. My little cluster of 9 nodes can do just about 60 million MD5's a second so a full 8 character run would take nearly 2 months to complete.
((69^6)/30M) / 60 = 59.95 minutes for 6 chars
With that, we run and wait...[Incremental:MW]
File = $JOHN/lanman.chr
MinLen = 6
MaxLen = 6
CharCount = 69
[List.External:MW]
void filter()
{
int i, c;
i = 0;
while (c = word[i]) {
// If character is lower case, convert to upper
if (c >= 'a' && c <= 'z')
word[i] &= 0xDF;
i++;
}
// We know the static filter 08-?-?????
// Add or remove word[]s to fit the incremental length
word[9] = word[5];
word[8] = word[4];
word[7] = word[3];
word[6] = word[2];
word[5] = word[1];
word[4] = '-';
word[3] = word[0];
word[2] = '-';
word[1] = '8';
word[0] = '0';
}
# john -i=MW -e=MW mw2k8.codes --format=raw-MD5.. but not too long because the first code looks REALLY interesting: 08-S-STAFF. Lets try it!
Loaded 1341 password hashes with no different salts (Raw MD5 [raw-md5 SSE2])
Happy new year everybody! Here's a little secret for web developers: client-side verification of user data is sometimes ok, but back it up with a server verification AND don't give important/secret stuff to the client.
I wanted to head over to MacWorld this week and obtained a "PC" code for a free Expo pass. That's cool and all but it doesn't get me access to see Jobs' keynote unless I sneak in. Plus if I got a regular badge I wouldn't have priority seating, something you really need since everyone and their goat flocks to hear Jobs say "One more thing..." But, alas, I'd only receive an Expo pass.
I plug in the register URL and start inserting my information. The second screen is where your Priority Code gets entered. Being the curious person I am I took a peek at the source code. Much to my chagrin I find this:
Well huh. These look like MD5 hashes. Lets look a little deeper in the code. On line 2515 there's a javascript function named "check_password" which is called any time the Priority Code field changes. Let's see what it does:
[List.External:AlNum_Upper]
void filter()
{
int i, c;
i = 0; // Convert to uppercase
while (c = word[i]) {
if ((c < 'a' || c > 'z') && (c < '0' || c > '9')) {
word = 0; return;
} else {
if (c >= 'a' && c <= 'z') word[i] &= 0xDF; } i++; } } $ john --format=raw-MD5 --incremental=alnum --external=alnum_upper macworld.codesLess than 10 seconds and I've already cracked a code that looks interesting. Lets see what we get:
Loaded 897 password hashes with no different salts (Raw MD5 [raw-md5])
CREDIT (1183)
guesses: 1 time: 0:00:00:09 c/s: 20372K trying: ADRY
This year was my first time going to the MacWorld Expo. My family has always had one form of a Macintosh ever since they were first introduced in 1985. Only recently did I finally purchase one for myself, primarily because I knew the shift to Intel processors would be a great big thing for all of computing.
That's become true because the wide gap between Windows and OSX has nearly been bridged:
