Mastodawn

Royce Williams Feb 3, 2023

TIL Microsoft calls them "NT hashes" or "Unicode hashes", not "NTLM" hashes. "NTLM" refers to the authentication protocol, not to the hash itself.

https://learn.microsoft.com/en-us/services-hub/health/remediation-steps-ad/prevent-storage-of-lan-manager-password-hashes

https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/prevent-windows-store-lm-hash-password

https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-samr/7b2aeb27-92fc-41f6-8437-deb65d950921#gt_7eb5bce8-bdc5-4d61-a3d9-263ada14ba1f

h/t: Roger Grimes

Why you should prevent storage of LAN Manager password hashes

Describes how to prevent storage of LAN Manager password hashes and outlines context and best practices.

HTTP 1.1/418 Old Teapot Typewriter Font

@tychotithonus Strong “well, actually” energy with that distinction.