479 reputation
49
bio website
location
age
visits member for 2 years, 1 month
seen Dec 24 at 20:50

Nov
28
awarded  Popular Question
Nov
28
comment VP of IT claims he unhashed 100% of all 16k employees' PWs. Is he lying to us?
@Blrfl: Maybe. To be fair to him, though, this was in the context of a regular newsletter that he sends anyway, so maybe it was less of a "finger-wagging" and more of, "Gee, I forgot to come up with something for the newsletter." :-)
Nov
28
comment VP of IT claims he unhashed 100% of all 16k employees' PWs. Is he lying to us?
@D.W. : Maybe I have misconstrued my stance on this. I'm not "worked up" over it. My initial email to him was out of honest, genuine curiosity. I regret that I only took one crypto class in school, since it truly fascinates me. I was just blown away that he claimed to have cracked "100%" of them; When he reaffirmed via email reply that, 'Yes, it was indeed 100% of them', I wasn't "interpreting statements in an overly-precise way" - that's what he really said (and confirmed!). It's not that "someone is wrong on the Internet" - I honestly wondered if it was plausible, so I took it to SE.com
Nov
28
comment VP of IT claims he unhashed 100% of all 16k employees' PWs. Is he lying to us?
@Blrfl: Just to be clear, he didn't claim that 100% of the passwords were weak, he claimed that many of them were weak after he cracked "100%" of them to check their security.
Nov
28
awarded  Nice Question
Nov
28
awarded  Custodian
Nov
28
revised VP of IT claims he unhashed 100% of all 16k employees' PWs. Is he lying to us?
edited title
Nov
28
reviewed Reject VP of IT claims he unhashed 100% of all 16k employees' PWs. Is he lying to us?
Nov
28
comment VP of IT claims he unhashed 100% of all 16k employees' PWs. Is he lying to us?
@ThomasPornin: No, he didn't reply to my second email. I see 3 possibilities: (1) He has the answer, but since he's a VP, I was lucky to have received the FIRST reply, let alone expect a second, (2) I called his bluff and he doesn't want to let on by replying without the answer, or (3) he went and rented several Amazon EC2 instances and is furiously running ONLY MY password hash through his tools so he doesn't have to admit he lied. :-)
Nov
28
comment VP of IT claims he unhashed 100% of all 16k employees' PWs. Is he lying to us?
Note that I emailed him about it, and he replied insisting that he had indeed cracked "all" of them. This very claim is what makes me wonder if it's a dubious claim.
Nov
28
awarded  Student
Nov
28
awarded  Editor
Nov
28
revised VP of IT claims he unhashed 100% of all 16k employees' PWs. Is he lying to us?
added 495 characters in body
Nov
28
asked VP of IT claims he unhashed 100% of all 16k employees' PWs. Is he lying to us?