Welcome, Guest. Please Login or Register.
November 24, 2017, 10:56:03 PM
Home Help Search Login Register
News: If you are still using YaBB SE, please consider upgrading to SMF as soon as possible.

YaBB SE Community  |  YaBB SE Info  |  News From the YaBB SE Team  |  Topic: Encrypted passwords « previous next »
Pages: [1] 2 Reply Ignore Print
Author Topic: Encrypted passwords  (Read 32451 times)
Agelmar
YaBB God
*****
Posts: 931


Takako Matsu = Goddess


Encrypted passwords
« on: December 09, 2001, 05:14:37 PM »
Reply with quote

I just thought of this - if a Y1G board uses the encrypted passwords mod... is it possible to port it to YaBBSE?
Logged

Joseph Fung
Global Moderator
YaBB God
*****
Posts: 4512


Keep smiling: it makes others nervous.


WWW
Re:Encrypted passwords
« Reply #1 on: December 09, 2001, 05:16:02 PM »
Reply with quote

hmm...that's a toughie...the porter assumes the passwords are unencrypted...

how's the encryption done? if it's using crypt with the 2 first chars of the passwd as the seed - then it can be done..
Logged

Agelmar
YaBB God
*****
Posts: 931


Takako Matsu = Goddess


Re:Encrypted passwords
« Reply #2 on: December 09, 2001, 05:16:56 PM »
Reply with quote

With the mod, it actually asks for a seed...
Logged

Agelmar
YaBB God
*****
Posts: 931


Takako Matsu = Goddess


Re:Encrypted passwords
« Reply #3 on: December 09, 2001, 05:18:14 PM »
Reply with quote

I'm looking to see if I can find the documentation for the mod, gimme a sec...
Logged

Joseph Fung
Global Moderator
YaBB God
*****
Posts: 4512


Keep smiling: it makes others nervous.


WWW
Re:Encrypted passwords
« Reply #4 on: December 09, 2001, 05:21:24 PM »
Reply with quote

if it's using the same seed for each password, I don't think we can do it then...
Logged

Agelmar
YaBB God
*****
Posts: 931


Takako Matsu = Goddess


Re:Encrypted passwords
« Reply #5 on: December 09, 2001, 05:22:49 PM »
Reply with quote

Yes, it uses the same seed for all passwords... If you had the seed, could you just import the password raw and have the forum check the inputted password encrypted to the seed against the stored value (that's how the mod works if I recall...)
Logged

Joseph Fung
Global Moderator
YaBB God
*****
Posts: 4512


Keep smiling: it makes others nervous.


WWW
Re:Encrypted passwords
« Reply #6 on: December 09, 2001, 05:26:41 PM »
Reply with quote

You'd have to apply a mod to the SE code - right now, the passwords are stored using the first 2 chars of the password as the seed (which is standard practice).  You'd have to change how the passwords are checked and then how the converter converts the info...
Logged

Mostmaster
Full Member
***
Posts: 184


I love all the YaBBs, but this one is the best!


WWW
Re:Encrypted passwords
« Reply #7 on: December 09, 2001, 05:27:33 PM »
Reply with quote

yup, the password-encryption-mod uses the seed 'ya' defined in the subs.pl (if I can remember).
So its possible. We have 2 mods now for the converter.
1. convert polls
2. convert encrypted passwords..

hehe.. ;D
Logged
Agelmar
YaBB God
*****
Posts: 931


Takako Matsu = Goddess


Re:Encrypted passwords
« Reply #8 on: December 09, 2001, 05:29:44 PM »
Reply with quote

Except that that mod would not be for the converter, but for the entire forum... the encryption is non-reversable.
Logged

Mostmaster
Full Member
***
Posts: 184


I love all the YaBBs, but this one is the best!


WWW
Re:Encrypted passwords
« Reply #9 on: December 09, 2001, 05:33:09 PM »
Reply with quote

you're right.
nasty problem...
we'll find something for it.. ;D
Logged
Jeff Lewis
Global Moderator
YaBB God
*****
Posts: 10149


I'm a llama!


WWW
Re:Encrypted passwords
« Reply #10 on: December 09, 2001, 05:36:11 PM »
Reply with quote

Hehe I do have a tool which decrypts them, just takes a long time ;)
Logged

Agelmar
YaBB God
*****
Posts: 931


Takako Matsu = Goddess


Re:Encrypted passwords
« Reply #11 on: December 09, 2001, 05:37:13 PM »
Reply with quote

Really? Would you mind passing that my way? I could really use it, as I have a pet project I'm working on...
Logged

Mostmaster
Full Member
***
Posts: 184


I love all the YaBBs, but this one is the best!


WWW
Re:Encrypted passwords
« Reply #12 on: December 09, 2001, 05:41:54 PM »
Reply with quote

With brute force.... ;D
Logged
Edwin
Guest
Re:Encrypted passwords
« Reply #13 on: December 09, 2001, 05:43:37 PM »
Reply with quote

Hehe I do have a tool which decrypts them, just takes a long time ;)

Yup, in the year 2424 it's decrypted  ;D
Logged
Jeff Lewis
Global Moderator
YaBB God
*****
Posts: 10149


I'm a llama!


WWW
Re:Encrypted passwords
« Reply #14 on: December 09, 2001, 05:45:56 PM »
Reply with quote

It's faster than that and I've used it at work...
Logged

Pages: [1] 2 Reply Ignore Print 
YaBB SE Community  |  YaBB SE Info  |  News From the YaBB SE Team  |  Topic: Encrypted passwords « previous next »
 


Powered by MySQL Powered by PHP YaBB SE Community | Powered by YaBB SE
2001-2003, YaBB SE Dev Team. All Rights Reserved.
SMF 2.0.12 | SMF © 2016, Simple Machines
Valid XHTML 1.0! Valid CSS!
Page created in 0.082 seconds with 19 queries.