View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0002363 | unreal | ircd | public | 2005-02-22 20:22 | 2005-02-22 20:43 |
| Reporter | GSF19 | Assigned To | |||
| Priority | normal | Severity | feature | Reproducibility | always |
| Status | closed | Resolution | open | ||
| Summary | 0002363: bruteforcing # key? | ||||
| Description | i dont know if i'm missing something like theres an option to do that or it has allready been posted but isnt it very easy to do a bruteforce "attack" on a #channel and find it's key.. ?? shouldn't there be a check to shun or gline or whatever to a client that tries something like it.. ? | ||||
| 3rd party modules | |||||
|
|
how is this "very easy"? for a constant stream of attempts, 1 attempt per-client per 1-2 seconds isn't exactly fast if you ask me. Say, a key is 8 characters, no digits, all alpha lowercase, 26^8=208827064576 possibilities. That means it will take (roughly) that amount of seconds (longer, actually), which is 6621 years. Or am I missing something... *edit* uh ok, it's indeed easy.. but completely infeasible ;) */edit* |
|
|
i'm really not good with math but why should only one client do the attempt.. imagine someone could load 100 proxies .. maybe it could be redused to 3000 years or so.. :P (anyway i just thought i should post it for any reason) |
|
|
well right, even if you load 100 drones, it would still take like 60 years... and if you launch thousand.. still 6 years.. not to mention that opers will probably kill your dronenet :P. *edit* typo's */edit* |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2005-02-22 20:22 | GSF19 | New Issue | |
| 2005-02-22 20:29 | syzop | Note Added: 0009253 | |
| 2005-02-22 20:31 | syzop | Note Edited: 0009253 | |
| 2005-02-22 20:35 | GSF19 | Note Added: 0009254 | |
| 2005-02-22 20:37 | syzop | Note Added: 0009255 | |
| 2005-02-22 20:38 | syzop | Note Edited: 0009255 | |
| 2005-02-22 20:43 | syzop | Status | new => closed |
