unforum

Mendax XIII · Boot Joined: 16 Oct 2003 Posts: 27

Metacortech Passwords

**Posted:** Mon Oct 27, 2003 7:37 am

_________________
Chips, Dips, Chains and Whips, just your average teenage party

Omnie · Entrenched Joined: 07 Oct 2003 Posts: 772

For the record, we also have Dave Regenhardt's, as well as Thomas Anderson's (heh). Didn't someone decompile the flash login and find that there were no valid logins as of then? Has that changed? There's obviously no point in putting effort into it if there are no possible solutions, but maybe they added possible solutions? Sorry, I know the above is kinda slightly behind-the-curtain, but it sure has been helpful...

**Posted:** Mon Oct 27, 2003 5:37 pm

Monki

Beth is my lover

**Posted:** Tue Oct 28, 2003 1:36 am

_________________
--((Insert insanely vague literary text here))--

dragonfyre · Greenhorn Joined: 28 Oct 2003 Posts: 3

Except the meta cortex names are more like company user names, and the passwords probably follow that professional attitude, i.e. her pw could be 4R3tg65r99 Until we get something else I don't think pulling passwordsout of thin air is gonna work.

**Posted:** Tue Oct 28, 2003 1:59 am

ParityBit

Well, I have colleagues at my work who always use football related passwords. Unless the system rejects uncomplicated passwords, people will use ones in a similar vein to their others (unless they themselves are security conscious).

So I wouldn't necessarily think that Beth's work password is suddenly going to be a lot different from her other ones - she obviously thinks that her ones on Litte-Boxes and Metadex are secure.

But we have had no 'direct' clue to it yet, and we did with her others.

**Posted:** Tue Oct 28, 2003 5:34 am

yeahyeah · Decorated Joined: 14 Oct 2003 Posts: 282

Last I checked the flash login is still broken, until the Members.txt pops back up, or they change how the login process works, we cant progress on actually gaining acces to accounts. I still think the voicemail is being overlooked, some social engineering may get us somewhere though.. (since we have the account info, and the admins voicemail.....)

Just a thought

**Posted:** Tue Oct 28, 2003 8:00 am

Marl64

**Posted:** Tue Oct 28, 2003 9:14 am

_________________
Marl
(There is no spoon, oh wait, there it is)

AnthraX101 · Entrenched Joined: 18 Mar 2003 Posts: 797

Decompiling flash is usualy "out of bounds" in an ARG.

AnthraX101

**Posted:** Tue Oct 28, 2003 10:09 am

edmnc · Boot Joined: 28 Oct 2003 Posts: 10

a bit offtopic ...

**Posted:** Tue Oct 28, 2003 5:24 pm

Giskard

Re: Beth is my lover

**Posted:** Tue Oct 28, 2003 8:34 pm

_________________
"They never tell you truth is subjective, they only tell you not to lie." -- Gary Jules

joebrent

**Posted:** Tue Oct 28, 2003 8:40 pm

AcidTWister · Boot Joined: 17 Oct 2003 Posts: 16

you have to ask though, what is gaining access to metacortechs employee side going to give us, though? so far, it's been pretty obvious what we'd get by gaining passwords.

little-boxes = archive access
metadex = an email program. so we'd get access to emails, which we have.
metacortechs = what could it possibly have that would even be slightly relevant?

secondly... we have no evidence her password will follow the trend of the last two. in fact, i'd say we have more evidence that suggests AGAINST it. metadex and little-boxes she got to choose her own user-name. metadechs, she's assigned a number. what do you wanna bet she's been assigned a password, as well?

**Posted:** Wed Oct 29, 2003 3:30 am

AnthraX101 · Entrenched Joined: 18 Mar 2003 Posts: 797

Assigning passwords is not a good aproach to a secure system. It makes users more likely to write down their passwords, and provides an audit trail when they are notified of the new passwords. Users should set their own passwords to something meaningfull to them, constrained by character requirements.

I would bet that she set her own password. Smile

AnthraX101

**Posted:** Wed Oct 29, 2003 10:56 am

Giskard

**Posted:** Wed Oct 29, 2003 1:18 pm

_________________
"They never tell you truth is subjective, they only tell you not to lie." -- Gary Jules

katgirl · Boot Joined: 13 Oct 2003 Posts: 17 Location: New Zealand

**Posted:** Thu Oct 30, 2003 9:49 pm