-
Could have a folder with double-hashed passwords and the backend logs the filename whose contents matched the hash of the password received?
-
I see that the master password can be of any length, including the empty string. Allowing a naive user to enter very short passwords can make them easy to guess. For example, creating a one-character …
-
```
await bcrypt.hash(variables.password, 10).then(function(hash){
newUser.password = hash
})
```
_"Bcrypt supports both sync and async methods. The asynchronous approach…
-
In slidesharefield_api_upload() , there is no need for
$key= variable_get('slideshareapi_key', NULL);
$secret= variable_get('slideshareapi_secret', NULL);
$username = variable_get('slide…
Ferdi updated
13 years ago
-
# Task Description
When a user authenticates, the logs may contain his hashed password. We should make sure that we don't leak any credential information in the logs (even hashed passwords).
# T…
-
## Support Argon2 hashing
### Problem
Argon2 won the 2015 password hashing competition ( https://en.wikipedia.org/wiki/Argon2 ). Would be great to offer this as one of the options for password h…
-
Hi there,
You are saving the passwords as a plain md5 hash. That used to be "OK", but people have been building giant rainbowtables it isn't anymore.
I could simply revert the admin password hash …
-
Getting an error displaying on screen on the latest Win11 with jumbo when working on 7z, zip (tested)
Win11 - 10.0.22631.3296
Error text: `Build log: (): Warning: Function zip is a kernel, so ov…
-
**Describe the bug**
In the pop-up to refresh server session, credentials are listed as 'email and password' even when using private username mode (defined as not tied to an email address):
> "Ple…
-
**Is your feature request related to a problem? Please describe.**
There is no way currently to set the root password that ends up in the snapshot. This is problematic, as if VMs created from the sna…