DonationCoder.com forum
 
Read-only archive. This is a static copy of the DonationCoder.com forum. Reading and searching work as before; logging in, posting and private messages do not.
Archive of 2026-10-21 · About this archive · Main site

Author Topic: "NTLM 100% Broken Using Hashes Derived From Captures"  (Read 5,160 times)

TaoPhoenix

  • 0 - 60 ... then back to 0 again!
  • Supporting Member
  • Joined in 2011
  • **
  • Posts: 4,642
    • Participated in NANY Challenge Three Times
"NTLM 100% Broken Using Hashes Derived From Captures"
« on: January 09, 2013, 01:27 AM »
I'll leave this one to my betters:

"NTLM 100% Broken Using Hashes Derived From Captures"
http://it.slashdot.org/story/13/01/09/0047202/ntlm-100-broken-using-hashes-derived-from-captures

"Microsoft has posted a little guidance for those who need to turn off NTLM."
http://support.microsoft.com/kb/2793313
Systems that are affected in a default configuration are primarily at risk, such as systems that are running Microsoft Windows NT 4, Windows 2000, Windows XP, and Windows Server 2003. For example, by default, Windows XP and Windows Server 2003 both support NTLMv1 authentication.
To have us fix this problem for you, go to the "Fix it for me" section.

Fix this problem
Microsoft Fix it 50969

------------------

So how serious is this for ordinary home users? If I click "Fix it" will I suddenly lose my Wifi connection?

Use attachthumb=# to show an attached image as an expandable thumbnail, or attach=# to show full size. (With Brackets)

Stoic Joker

  • Honorary Member
  • Joined in 2008
  • **
  • Posts: 6,652
    • Cody Award
    • Participated in NANY Challenge Five Times
Re: "NTLM 100% Broken Using Hashes Derived From Captures"
« Reply #1 on: January 09, 2013, 12:56 PM »
Quote from: Microsoft KB2793313
What are the potential risks of enforcing NTLMv2?
All supported versions of the Windows operating system support NTLMv2. Windows NT 4.0 SP6a also supports NTLMv2.

NT Local Machine (NTLM) authentication has nothing to do with your WiFi. It the mechanism used to authenticate Local Machine accounts over the wire. WiFi is just a Layer 1 media connection.

Strange that this is still an issue since forcing NTLMv2 was a recommended configuration for Windows 2000 way back when it was released. It was actually covered in several of the whitepapers then, that (apparently) nobody read.

f0dder

  • [Well, THAT escalated quickly!]
  • Charter Honorary Member
  • Joined in 2005
  • ***
  • Posts: 9,153
    • Participated in NANY Challenge Once
Re: "NTLM 100% Broken Using Hashes Derived From Captures"
« Reply #2 on: January 09, 2013, 09:57 PM »
How can anything regarding NTLMv1 be considered news? :D
- carpe noctem

Original address: https://www.donationcoder.com/forum/index.php?topic=33616.0