Path: utzoo!attcan!uunet!husc6!mit-eddie!fenchurch!jbs
From: jbs@fenchurch.mit.edu (Jeff Siegal)
Newsgroups: comp.unix.wizards
Subject: Re: BSD passwd() [was Re: How to stop future viruses.]
Summary: My 400-salt claim was wrong
Message-ID: <10442@eddie.MIT.EDU>
Date: 12 Nov 88 16:35:40 GMT
References: <2178@cuuxb.ATT.COM> <778@mailrus.cc.umich.edu> <10835@ulysses.homer.nj.att.com> <10436@eddie.MIT.EDU> <7311@pasteur.Berkeley.EDU>
Sender: uucp@eddie.MIT.EDU
Reply-To: jbs@fenchurch.UUCP (Jeff Siegal)
Organization: MIT, EE/CS Computer Facilities, Cambridge, MA
Lines: 16

In article <7311@pasteur.Berkeley.EDU> aoki@faerie.Berkeley.EDU (Paul M. Aoki) writes:
>In article <10436@eddie.MIT.EDU> jbs@fenchurch.UUCP (Jeff Siegal) writes:
>>[...]only about 400 salts ever get used.
>Hmm.  I just [...] found 630 salts for 671 accounts [...].

Yes, it is pretty clear now that my claim is wrong.

>Where did you get this information?

I was told this a while ago--I don't remember by whom.  Before posting
the information, I did check the source code but I did not think very
hard about what I saw.

After looking again and thinking a bit, I see now why it isn't true.

Jeff Siegal