PDA

View Full Version : Folder Lock 5.8.2 unsecure


waldovanlaeken
March 16th, 2008, 09:53 AM
I have the full version of this program that is already mentioned many times in this forum.

Today i decided to try it out the for the first time.

It seems to offer (according the manual) 256-Bit blowfish.

So i decided to create a strong password with 64 carathers (HEX) to get the
256-bit.

I also tried a 32 carathers string with using the FULL ASCII set (256-bit) also.

Now for the unsafety :

It seems it only takes usage for the first 16 carathers in the password, nomather if you use 64 or even 100 carathers.

If you enter just the first 16, access is granted ! so why type more than 16 carathers ? huh ???

It also seems it can't handle case sentitive passwords, upper or lower case is the same , can't use strange symbols, only + - / etc... and max. 16 carathers.

How on earth can I utilise the full 256-bit strength with this ??

I know that recomended Blowfish is 448- bits but they use 256-bit, but that should be enough for the home user. But you can't even make strong passwords ?

http://www.newsoftwares.net/folderlock/

TECHWG
March 21st, 2008, 06:20 PM
Your using a keyfile? what is a carather

GlobalForce
March 21st, 2008, 08:40 PM
Haven't you ever seen the "squeal of torture (http://en.wikipedia.org/wiki/Wheel_of_Fortune_(US_game_show))?" :D You've gotta ad-lib once in a while .... character's.

GF

waldovanlaeken
March 23rd, 2008, 05:43 PM
{QUOTE-> Your using a keyfile? what is a carather <-QUOTE}

It's a typo : character = letter / number / symbol etc...

NO keyfile option for Folderlock > Only weak passwords.

I'm Flamisch (http://www.worldlanguage.com/German/Languages/Flemish.htm)
so excuse my bad gramar.