bugGlobulation 2 - Bugs: bug #22218, YOG-Password: store crypted

 
 

bug #22218: YOG-Password: store crypted

Submitted by:  Leo Wandersleb <giszmo>
Submitted on:  Sat 02 Feb 2008 10:38:25 AM UTC  
 
Severity: 3 - NormalStatus: Invalid
Assigned to: Bradley Arsenault <genixpro>Open/Closed: Closed
Release: NoneOperating System: None

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Mon 31 Mar 2008 03:07:53 AM UTC, comment #2:

The password stored on the hard disc has been, since its the new YOG's creation, a salted sha1 key.

Bradley Arsenault <genixpro>
Project AdministratorIn charge of this item.
Thu 13 Mar 2008 10:23:40 AM UTC, comment #1:

degrading to "wish" is not a solution. it is an error to not tell our users that we and everybody who hacks us gets access to their passwords.

either tell before registering for yog or fix in the first place.

Leo Wandersleb <giszmo>
Project Member
Sat 02 Feb 2008 10:38:25 AM UTC, original submission:

As far as I know the password still is stored plain text. salt-md5 this please.

Leo Wandersleb <giszmo>
Project Member

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by genixpro (Posted a comment)
  • -unavailable- added by appleboy (Updated the item)
  • -unavailable- added by giszmo (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 5 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Mon 31 Mar 2008 03:07:53 AM UTCgenixproStatusNone=>Invalid
      Open/ClosedOpen=>Closed
    Thu 13 Mar 2008 10:23:40 AM UTCgiszmoSeverity1 - Wish=>3 - Normal
    Thu 13 Mar 2008 08:30:39 AM UTCappleboySeverity3 - Normal=>1 - Wish
    Sat 02 Feb 2008 10:42:00 AM UTCgiszmoAssigned toNone=>genixpro

    Back to the top


    Powered by Savane 3.1-cleanup1