p40tomahawk, Rainbow tables can hardly crack anything that's under 14 chars; they can only crack passwords on certain versions of windows when the attacker has physical access to the victims computer. Tell me mr Know it all, how can you use rainbow tables against gmail, facebook or bankofamerica.com. You can't (as long as the user doesn't reuse thier windows passwords in those sites)