News

Protect Yourself from Lost Passwords

ElcomSoft reliably recovers ZIP passwords.

ElcomSoft makes password recovery utilities for a variety of file formats: Microsoft Office, Lotus SmartSuite, Adobe Acrobat, and others. They sent me a copy of their Advanced Archive Password Recovery utility, which handles the task of determining passwords for ZIP, RAR, ARJ, and other archive files.

The program uses a variety of means to extract files from password-protected archives, including brute force, dictionary, and known-plaintext attacks. It can also exploit weaknesses in some of the encryption algorithms. It took from 15 minutes to six hours on the files I threw at it, on a relatively fast machine—but it succeeded in decrypting the archives.

This brings two conclusions to mind. First, if you happen to be faced with an encrypted archive that you legally own (perhaps it was left behind by an ex-employee), there's an effective way in. Second, I wouldn't trust archive encryption to protect anything terribly sensitive.

About the Author

Mike Gunderloy, MCSE, MCSD, MCDBA, is a former MCP columnist and the author of numerous development books.

Featured

  • Office 365 Attack Simulator Now Supports Attachments

    The Attack Simulator in Office 365 tool has been updated and now has the ability to include message attachments in targeted campaigns, according to a Friday Microsoft announcement.

  • How To Disable Touch Input in Windows 10

    When the touchscreen on your Windows 10 laptop goes bad, there's no reason to throw that baby out with the bath water.

  • Microsoft Previews Windows VM Authentications via Azure Active Directory

    Microsoft on Thursday announced a preview of remote authentications into Windows-based Azure virtual machines (VMs) using Azure AD credentials.

  • Windows Server 20H1 Getting Smaller Containers and Faster PowerShell

    Microsoft is promising to deliver a smaller container size and improved PowerShell performance with its next release of Windows Server.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.