chicksdaddy writes “A presentation at the Passwords^12 Conference in Oslo, Norway (slides), has moved the goalposts on password cracking yet again. Speaking on Monday, researcher Jeremi Gosney (a.k.a epixoip) demonstrated a rig that leveraged the Open Computing Language (OpenCL) framework and a technology known as Virtual Open Cluster (VCL) to run the HashCat password cracking program across a cluster of five, 4U servers equipped with 25 AMD Radeon GPUs communicating at 10 Gbps and 20 Gbps over Infiniband switched fabric. Gosney’s system elevates password cracking to the next level, and effectively renders even the strongest passwords protected with weaker encryption algorithms, like Microsoft’s LM and NTLM, obsolete. In a test, the researcher’s system was able to generate 348 billion NTLM password hash checks per second. That renders even the most secure password vulnerable to compute-intensive brute force and wordlist (or dictionary) attacks. A 14 character Windows XP password hashed using LM for example, would fall in just six minutes, said Per Thorsheim, organizer of the Passwords^12 Conference. For some context: In June, Poul-Henning Kamp, creator of the md5crypt() function used by FreeBSD and other, Linux-based operating systems, was forced to acknowledge that the hashing function is no longer suitable for production use — a victim of GPU-powered systems that could perform ‘close to 1 million checks per second on COTS (commercial off the shelf) GPU hardware,’ he wrote. Gosney’s cluster cranks out more than 77 million brute force attempts per second against MD5crypt.” Read more of this story at Slashdot.
See original article:
New 25-GPU Monster Devours Strong Passwords In Minutes
MrSeb writes “Way back in August, three months before the release of Windows 8, we learned about the existence of a project at Microsoft codenamed Blue. At the time it wasn’t clear whether this was Windows 9, or some kind of interim update/service pack for Windows 8. Now, if unnamed sources are to be believed, Windows Blue is both of those things: a major update to Windows 8, and also the beginning of a major shift that will result in a major release of Windows every 12 months — just like Apple’s OS X. According to these insiders, Blue will roll out mid-2013, and will be very cheap — or possibly even free, to ensure that ‘Windows Blue the next OS that everyone installs.’ Exact details are still rather vague, but at the very least Blue will make ‘UI changes’ to Windows 8. The sources also indicate that the Windows 8 and Windows Phone 8 SDKs will be merged or standardized, to further simplify the development of cross-platform apps. Perhaps more important, though, is the shift to a 12-month release cadence. Historically, Microsoft has released a major version of Windows every few years, with the intervening periods populated with stability- and security-oriented service packs. Now it seems that Microsoft wants to move to an OS X-like system, where new and exciting features will be added on an annual basis. In turn, Microsoft will drop the price of these releases — probably to around $25, just like OS X.” Read more of this story at Slashdot. 
This Thanksgiving, cooking a turkey in an oven or deep fryer just isn’t as impressive as some of the alternative methods out there — such as cooking with a flashlight. [Read more] 
A new update fixes keychain problems, but does not address the inability to install 10.8.2 on some Mac systems. [Read more] 