PPTP hack leaves corporate VPNs wide open!

[Wombler]

I just posted the article PPTP hack leaves corporate VPNs wide open!.

Tools launched at the recent DEF CON 20 hacking conference in Las Vegas will give grave concerns to network administrators.

Read the full article here: [http://www.myce.com/news/pptp-hack-leaves-corporate-vpns-wide-open-62748/](http://www.myce.com/news/pptp-hack-leaves-corporate-vpns-wide-open-62748/)

Feel free to add your comments below. 

Please note that the reactions from the complete site will be synched below.

[ChristineBCW]

Boy, sure glad we stopped using FILETOPIA and DCC++ about 7 years ago!

[Mr_Belvedere]

One of Moxie’s programs, ‘ChapCrack’ targets MS-CHAPv2 handshakes and Secure Socket Layer (SSL) communications to generate a key
Hmm… scary.

that can be fed to another program dubbed ‘CloudCracker’ which runs on super computer utilising customised hardware.
Hmm… not so scary.

In less than a day CloudCracker generates another key
But on what kind of super computer?

which can then be fed back into ChapCrack enabling ChapCrack to break the Data Encryption Standard (DES) codes.
Scary.

I’m not sure what to think of this…

[RTV71]

OpenVPN supports WinXP (and most everything else).