Conversation

Notices

  1. whats goin' on in this thread?

    Wednesday, 28-Mar-12 11:59:15 UTC from web
    1. @purplephish20 I don't even know anymore.

      Wednesday, 28-Mar-12 11:59:47 UTC from web
    2. @purplephish20 Arguing about whether passwords are good, torturing me for profit... You know, the usual.

      Wednesday, 28-Mar-12 12:00:10 UTC from StatusNet Android
      1. @redenchilada crap...... my passwords are really simple.....

        Wednesday, 28-Mar-12 12:01:09 UTC from web
        1. @purplephish20 I know. I've seen the database.

          Wednesday, 28-Mar-12 12:02:22 UTC from StatusNet Desktop
          1. @ceruleanspark what... database?

            Wednesday, 28-Mar-12 12:03:01 UTC from web
            1. @purplephish20 RDN's user database! (Note: You can't actually view passwords in there)

              Wednesday, 28-Mar-12 12:03:36 UTC from StatusNet Desktop
              1. @ceruleanspark phew.....

                Wednesday, 28-Mar-12 12:04:40 UTC from web
          2. @ceruleanspark They're stored in plaintext? See this is why I use openid, because I can't trust the sites I use to be storing passwords securely.

            Wednesday, 28-Mar-12 12:04:26 UTC from web
            1. @toksyuryel Nah. Individually salted hashes.

              Wednesday, 28-Mar-12 12:04:57 UTC from StatusNet Desktop
              1. @ceruleanspark Alright, that's good. SHA hashes right?

                Wednesday, 28-Mar-12 12:05:31 UTC from web
                1. @toksyuryel I don't know. It just says "Individually hashed and salted" in the DB comments.

                  Wednesday, 28-Mar-12 12:08:13 UTC from StatusNet Desktop
                  1. @ceruleanspark Mmm, salted hash passwords. Sounds delicious.

                    Wednesday, 28-Mar-12 12:09:19 UTC from StatusNet Android
                  2. @ceruleanspark Hm. Well hopefully that's good enough.

                    Wednesday, 28-Mar-12 12:10:37 UTC from web
              2. @ceruleanspark Sounds tasty.

                Wednesday, 28-Mar-12 12:06:56 UTC from web
        2. @purplephish20 They aren't "password", are they?

          Wednesday, 28-Mar-12 12:02:32 UTC from StatusNet Android
          1. @redenchilada no.... the only time in my life I remember actually having "password" my password was when I used to play runescape

            Wednesday, 28-Mar-12 12:03:40 UTC from web
    3. @purplephish20 http://ur1.ca/8tv95

      Wednesday, 28-Mar-12 12:02:18 UTC from web