There might be a way to make trillian more secure by writing your own strong version of crypto.dll and then mod trillian to use it instead. But that's a lot more work than simply not using trillian. As for your first question Tronic, I imagine it does store it somewhere. As for your second question, yes, it looks like that's all that it does. I haven't really gone in depth on cracking the actual password scheme since simply doing a codebook attack against it worked just fine. At some point when I'm not busy, I'll sit down with the tables and figure out how it works and write a program that'll decrypt the passwords or generate new ones without having to have a codebook loaded or provided.
Right now I don't have much time as I'm starting up a computer club at my school and am devoting my energy to getting machines, organizing things, and writing some basic utilities for the machines. But, anyone else is welcome to compile the tables the same way I did ( my site will have to program I made and used up very soon ) and then try cracking it. Right now I have the computer club and 3 coding projects to deal with before I get around to cracking the encryption itself. Maybe if school gets any more boring and teachers get lax, I'll work on cracking during class.




Reply With Quote