[ale] Counterpane Cracks MS's PPTP

Michael H. Warfield mhw at wittsend.com
Mon Jun 1 15:18:03 EDT 1998


	Not directly Linux related, but interesting non-the-less for those
of use keeping score on Microsoft's faux pax's...  Bruce Schneier and Mudge
have just ripped Microsoft a new <you know what>...


	Bruce Schneier of "Applied Cryptography" fame and Mudge have
announced that they have cracked Microsoft's PPTP.

	It's interesting to note that the abstact claims not to have broken
PPTP itself, only Microsoft'ss implimentation of it. (like there's another???).

	From their FAQ:

	1. What did Bruce Schneier and Mudge actually do? 

	They found security flaws in Microsoft PPTP that allow attacks to
sniff passwords across the network, break the encryption scheme and read
confidential data, and mount denial of service attacks against PPTP
servers. They did not find flaws in PPTP, only in Microsoft's implementation
of it. 

	http://www.counterpane.com/pptp.html

	Mike
-- 
 Michael H. Warfield    |  (770) 985-6132   |  mhw at WittsEnd.com
  (The Mad Wizard)      |  (770) 925-8248   |  http://www.wittsend.com/mhw/
  NIC whois:  MHW9      |  An optimist believes we live in the best of all
 PGP Key: 0xDF1DD471    |  possible worlds.  A pessimist is sure of it!






More information about the Ale mailing list