<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"> 
<channel>
<title>CodeStore.net comments on "Hacking the ACL"</title>
<description>Replies to blog "Hacking the ACL" on codestore.net.</description>
<link>http://www.codestore.net/</link>
<lastBuildDate>Thu, 12 Apr 2012 13:57:29 -0500</lastBuildDate>
<atom:link href="http://www.codestore.net/store.nsf/blog.xml?Open=20031110" rel="self" type="application/rss+xml" />

<item>
	<title>Reply from Mike</title>
	<pubDate>Thu, 12 Apr 2012 13:57:29 -0500</pubDate>
	<author>Mike</author>
	<description><![CDATA[ 
		<p>I've had this page bookmarked for about 5 years, and today I had to come back to reference it.  It's very handy.  Please never take it down.</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=E1A7EAC3AB15A9C0862579DE0068233B"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_E1A7EAC3</link>
</item><item>
	<title>Reply from noname</title>
	<pubDate>Wed, 15 Feb 2012 21:05:48 -0600</pubDate>
	<author>noname</author>
	<description><![CDATA[ 
		<p>Is there a hack to undo the locally encrypted mail database too?</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=708F153DC17FA806862579A6001101E3"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_708F153D</link>
</item><item>
	<title>Reply from Matt Cooper</title>
	<pubDate>Tue, 08 Mar 2011 12:35:20 -0600</pubDate>
	<author>Matt Cooper</author>
	<description><![CDATA[ 
		<p>Very nice trick.  Still works!</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=AE9F76D2EDCE172D8625784D00661C81"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_AE9F76D2</link>
</item><item>
	<title>Reply from Sia </title>
	<pubDate>Thu, 02 Sep 2010 11:18:59 -0500</pubDate>
	<author>Sia </author>
	<description><![CDATA[ 
		<p>Hello all,</p>
		<p>This here seems to be the most adequate forum with tricks on Lotus Notes. I work at a Service Desk and i have a customer, who apparently can't be helped by anyone from any of our support teams...:S He has Archives, that he has created with local encryption and has been using them for the past 8 years. He created them with his initial ID file. About 2 weeks ago he had called one of my agents, because he had forgotten his ID File password. The agent tried to reconfigure the whole thing by editing the notes.ini file and tried to send the user his initial ID File from the Database. Strangely enough, the ID File was not there, apparently his original ID File came from an older database, that is not used anymore and noone knows what it was or who can look into it. So our 2nd level team dispatched to 3rd level and 3rd level created a new ID File. User was then able to access everything but his archives (obviously). We tried looking for the old ID file, so we can try cracking it, on his backups, but to no avail. I really want to help this guy even though it's not my responsibility anymore. Do any of you know a way to crack an archive's local encryption? Any help will be appreciated.</p>
		<p>Sia</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=D1B6409222A8FE34862577920059A0AB"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_D1B64092</link>
</item><item>
	<title>Reply from Razvan</title>
	<pubDate>Thu, 22 Oct 2009 01:34:46 -0500</pubDate>
	<author>Razvan</author>
	<description><![CDATA[ 
		<p>Hello,</p>
		<p>I have a problem with a Lotus 6.5 archive. I copied it unfortunately in an encrypted file and then I have reinstalled my Windows. In this way I have lost my encryption key and now I cannot open my archive anymore. Is it a way to recover my archive?</p>
		<p>Thank you!</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=65B972033D2398BE8625765700242428"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_65B97203</link>
</item><item>
	<title>Reply from RPV</title>
	<pubDate></pubDate>
	<author>RPV</author>
	<description><![CDATA[ 
		<p>On Lotus Notes 7 & 8 mail.nsf files, I too discovered that the range bits described above didn't affect the ACL. Apparently, Lotus changed things around. I'm sure they had their reasons. I finally and successfully cleared out the ACL by experiementing on a local copy on each set that only included two pairs of bits. The ACL cleared by adding zeroes to the range of bits between offset 440 =0x1b8 and 0x1b9.</p>
		<p>Hope it works for you.</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=4585B992C3C7CB24852573E2006AFA38"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_4585B992</link>
</item><item>
	<title>Reply from Max Ng</title>
	<pubDate></pubDate>
	<author>Max Ng</author>
	<description><![CDATA[ 
		<p>I try that on my Notes 7 mail.nsf, apparently not working anymore. Got myself lockout when I forgotten my long tedious password of my notes.id</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=78F2EB8E7A12B77C85257344005C4A53"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_78F2EB8E</link>
</item><item>
	<title>Reply from Mart</title>
	<pubDate>Sun, 10 Sep 2006 13:16:00 +0100</pubDate>
	<author>Mart</author>
	<description><![CDATA[ 
		<p>Is this tool frhed suppose to be able to hack notes 7 ACL??</p>
		<p>I did exactly what u are suggesting i.e. set 00 in the specified range but still poping local access authorisation access message... can't get in!!!</p>
		<p>Any ideas why?</p>
		<p>Thanx</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=39DF915778FC7E418625720200645F78"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_39DF9157</link>
</item><item>
	<title>Reply from Jerry Carter</title>
	<pubDate>Tue, 19 Sep 2006 10:09:00 +0100</pubDate>
	<author>Jerry Carter</author>
	<description><![CDATA[ 
		<p>Update for ODS 43:  Just clear out the 12 01 in that range.  Do not clear anything else or the database becomes corrupt.  </p>
		<p>Had to use this today... got myself with the Enforce Consistent ACL setting.  Doh!</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=30FC5EFD64CD3173862571EE00534525"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_30FC5EFD</link>
</item><item>
	<title>Reply from Me</title>
	<pubDate>Mon, 31 Jan 2005 19:29:00 +0100</pubDate>
	<author>Me</author>
	<description><![CDATA[ 
		<p>Find a mail file and simply double click it from a network location :O</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=78ECA55A1CB9E7B386256F9B00082AA2"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_78ECA55A</link>
</item><item>
	<title>Reply from Burt</title>
	<pubDate>Mon, 17 Jan 2005 10:33:00 +0100</pubDate>
	<author>Burt</author>
	<description><![CDATA[ 
		<p>This thread has been very helpfull.  Eventhough it brings up certain security issues it is good that this info is available on the web.  It's a bitch when someone leaves the company and decides not to share their password with me (I'm the sys admin)!  Thanks, you have just saved me alot of work.</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=4779BC1A16C1075B86256F8C005AEF5E"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_4779BC1A</link>
</item><item>
	<title>Reply from Jeramie</title>
	<pubDate>Mon, 11 Oct 2004 19:50:00 +0100</pubDate>
	<author>Jeramie</author>
	<description><![CDATA[ 
		<p>hi Morris. Were you able to solve your problem? Coz I have the same thing and any opinion is greatly appreciated. :) Thanks in advance. Please mail me whenever you have an idea. :)</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=DE179F9CEF4C229C86256F49000A1443"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_DE179F9C</link>
</item><item>
	<title>Reply from Morris</title>
	<pubDate>Fri, 5 Nov 2004 06:38:00 +0100</pubDate>
	<author>Morris</author>
	<description><![CDATA[ 
		<p>Hi folks. Is it possible to decrypt a users .nsf mail database without his id. I have a stickler of a problem and I'm a bit green on Lotus. Thanks.</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=EC3BEA4A8155881486256E91003FF41A"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_EC3BEA4A</link>
</item><item>
	<title>Reply from A Colleague</title>
	<pubDate>Thu, 20 Nov 2003 14:41:00 +0100</pubDate>
	<author>A Colleague</author>
	<description><![CDATA[ 
		<p>This is one I really think you SHOULD have sat on, but now the Genie is out of the bottle.  I would suggest removing this thread.</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=7902E8FEE7D8320B86256DE40071AD74"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_7902E8FE</link>
</item><item>
	<title>Reply from jason.lin</title>
	<pubDate>Fri, 14 Nov 2003 03:14:00 +0100</pubDate>
	<author>jason.lin</author>
	<description><![CDATA[ 
		<p>but the problem is that cannot get the hideen agent and script code!is there any other solution can solve this problem?</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=94CA5FB8647DA26386256DDE0032BA86"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_94CA5FB8</link>
</item><item>
	<title>Reply from Jim G</title>
	<pubDate>Thu, 13 Nov 2003 04:32:00 +0100</pubDate>
	<author>Jim G</author>
	<description><![CDATA[ 
		<p>As an Administrator have you ever needed to access a users mailfile when they (the user) have deliberately removed all trace of Admins from the ACL. </p>
		<p>Open up the mailfile template, add a db queryopen that re-populates the ACL with whatever. Refresh the design of the mailfile. Next time the user opens his mailfile he will unknowingly grant you access.</p>
		<p>This is common Admin practise and isn't hacking exactly but might be construed as invasion of personal space. What's the diffrence ?</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=8399ED71DAB589D786256DDD0039DDDC"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_8399ED71</link>
</item><item>
	<title>Reply from Ian Cherrill</title>
	<pubDate>Thu, 11 Dec 2003 11:08:00 +0100</pubDate>
	<author>Ian Cherrill</author>
	<description><![CDATA[ 
		<p>I wrote a C API program called ACLHelp which is freely available on OpenNTF.org. It allows you to gain access to any database assuming you have access to the physical file. So the fact you can gain access in this way is VERY old news and no hex editors are required. The only way to properly protect databases like this is encryption.</p>
		<p>Bill - my understanding is that only object code is available in an R5 or R6 database with a hidden design. Although you can hack your way in with an API call, the source code is not available. This was a change from 4.6 where if you managed to remove the hide design flag you could see the source code.</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=C948465E04525DCF86256DDC005E273E"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_C948465E</link>
</item><item>
	<title>Reply from Wild Bill</title>
	<pubDate>Tue, 11 Nov 2003 22:10:00 +0100</pubDate>
	<author>Wild Bill</author>
	<description><![CDATA[ 
		<p>Ahh.</p>
		<p>As a Domino software developer, I have to state that .nsf files *do* contain product source. Should you *only* be relying on the "hide design", as you point out, your stuffed.</p>
		<p>Most script libraries and agents store the LS source in the document for that design object. So its very easy once you've globally recompiled (in a template copy of your Db) to destroy this field, thus preventing some unscrupulous b*st*rd stealing your hard-worked private source..</p>
		<p>Well - its what we do. Cynical ? Yes. Oh - and *do* make frequent backups...</p>
		<p>---* Bill</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=E352D7313672E5C386256DDC0016F7BF"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_E352D731</link>
</item><item>
	<title>Reply from Richard Schwartz</title>
	<pubDate>Tue, 11 Nov 2003 20:05:00 +0100</pubDate>
	<author>Richard Schwartz</author>
	<description><![CDATA[ 
		<p>Folks, this is cool for sure, but there's nothing here that's going to get anybody in trouble, or that's going to require IBM to improve the product.  IBM has never claimed that any of Domino's security features -- other than encryption -- could withstand attack by someone with physical access to the NSF file and a hex editor.  E.g., ReaderName fields also will not protect data against someone with physical access to an unencrypted server-based replica.  Real data security can only be achieved through proper physical security, good quality passwords, and encryption.</p>
		<p>-rich</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=633FEBA1155523D186256DDC000B7956"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_633FEBA1</link>
</item><item>
	<title>Reply from Jerry Carter</title>
	<pubDate>Tue, 11 Nov 2003 09:24:00 +0100</pubDate>
	<author>Jerry Carter</author>
	<description><![CDATA[ 
		<p>Guilherme,</p>
		<p>I appreciate the sentiment of that argument.  The thing that occurs to me, though, is: if we can ferret out which address to mangle with a hex editor... how could the product ever be made immune against such manipulation?</p>
		<p>Having asked the question... an answer is now coming to mind.  Anybody remember what the 8th bit is for in TTY 7 bit ?  :-)</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=4F64BD25AA96C5E686256DDB0054A9DD"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_4F64BD25</link>
</item><item>
	<title>Reply from Guilherme Guimaraes</title>
	<pubDate>Tue, 11 Nov 2003 05:48:00 +0100</pubDate>
	<author>Guilherme Guimaraes</author>
	<description><![CDATA[ 
		<p>I think our role as part of a community (modestly including myself) is keep the product getting better and better through time. Making this issues public will bring tips and good practices to avoid them too.</p>
		<p>P.S: Jake, i've used the same method as described by mt69clp. By the way, found in the Lotus Developer Domain.</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=4C35BA184875B2C886256DDB0040D519"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_4C35BA18</link>
</item><item>
	<title>Reply from Stephen Neal</title>
	<pubDate>Tue, 11 Nov 2003 03:13:00 +0100</pubDate>
	<author>Stephen Neal</author>
	<description><![CDATA[ 
		<p>Sorry Laurens - looks for desk to hide under - didn't notice the smiley... Jake you need to add a 'delete' comment action !</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=567DE93DB0CFA8B886256DDB0032A7FF"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_567DE93D</link>
</item><item>
	<title>Reply from Stephen Neal</title>
	<pubDate>Tue, 11 Nov 2003 03:11:00 +0100</pubDate>
	<author>Stephen Neal</author>
	<description><![CDATA[ 
		<p>Oh come on Laurens, talk about an over reaction, people have been hacking into products for years, just because Jake reveals information about getting into Notes - which by the way has been around for quite a while - does not make him a traitor.</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=B0304CC25486AB6386256DDB00328365"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_B0304CC2</link>
</item><item>
	<title>Reply from mike</title>
	<pubDate>Sat, 11 Oct 2003 17:54:00 +0100</pubDate>
	<author>mike</author>
	<description><![CDATA[ 
		<p>Wow, nice !</p>
		<p>My computer crashed 6 months ago and i was running R6 and i only managed to make a copy of my 3 year old mail file. </p>
		<p>Being R6 it locked me out of the database (no id file backedup, never needed to before)</p>
		<p>HOPEFULLY this may help me !</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=28D06883734B9F5586256DDA00835EC3"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_28D06883</link>
</item><item>
	<title>Reply from pF</title>
	<pubDate>Sat, 11 Oct 2003 11:37:00 +0100</pubDate>
	<author>pF</author>
	<description><![CDATA[ 
		<p>I'd say this was more cracking than hacking. But then it's not really illegal because in essence your modifying a file you have created - albeit in a lotus form. Whats the difference between this and editing a HTML document in notepad? It's not like the NSF file contains product source code or anything!</p>

		<p><a href="http://www.codestore.net/store.nsf/reply?OpenForm&ParentUNID=AB099E2737106D6786256DDA0060D866"><img border="0" src="http://www.codestore.net/store.nsf/images/rss_reply.gif" alt="Click here to post a response" /></a></p>
	]]></description>
	<link>http://www.codestore.net/store.nsf/unid/BLOG-20031110?OpenDocument#DOC_AB099E27</link>
</item>

</channel>
</rss> 
