News

Protect Yourself from Lost Passwords

ElcomSoft reliably recovers ZIP passwords.

ElcomSoft makes password recovery utilities for a variety of file formats: Microsoft Office, Lotus SmartSuite, Adobe Acrobat, and others. They sent me a copy of their Advanced Archive Password Recovery utility, which handles the task of determining passwords for ZIP, RAR, ARJ, and other archive files.

The program uses a variety of means to extract files from password-protected archives, including brute force, dictionary, and known-plaintext attacks. It can also exploit weaknesses in some of the encryption algorithms. It took from 15 minutes to six hours on the files I threw at it, on a relatively fast machine—but it succeeded in decrypting the archives.

This brings two conclusions to mind. First, if you happen to be faced with an encrypted archive that you legally own (perhaps it was left behind by an ex-employee), there's an effective way in. Second, I wouldn't trust archive encryption to protect anything terribly sensitive.

About the Author

Mike Gunderloy, MCSE, MCSD, MCDBA, is a former MCP columnist and the author of numerous development books.

Featured

  • SameSite Cookie Changes Rolled Back Until Summer

    The Chromium Project announced on Friday that it's delaying enforcement of SameSite cookie changes, and is temporarily rolling back those changes, because of the COVID-19 turmoil.

  • Basic Authentication Extended to 2H 2021 for Exchange Online Users

    Microsoft is now planning to disable Basic Authentication use with its Exchange Online service sometime in the "second half of 2021," according to a Friday announcement.

  • Microsoft Offers Endpoint Configuration Manager Advice for Keeping Remote Clients Patched

    Microsoft this week offered advice for organizations using Microsoft Endpoint Configuration Manager with remote Windows systems that need to get patched, and it also announced Update 2002.

  • Azure Edge Zones Hit Preview

    Azure Edge Zones, a new edge computing technology from Microsoft designed to enable new scenarios for developers and partners, emerged as a preview release this week.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.