Welcome, Guest. Please Login or Register.
April 19, 2024, 11:55:34 PM
Home Help Search Log in Register
News: If you are still using YaBB SE, please consider upgrading to SMF as soon as possible.

YaBB SE Community  |  YaBB SE Info  |  News From the YaBB SE Team  |  Encrypted passwords « previous next »
Pages: [1] 2 Reply Ignore Print
Author Topic: Encrypted passwords  (Read 89044 times)
Agelmar
YaBB God
*****
Posts: 931


Takako Matsu = Goddess
Encrypted passwords
« on: December 09, 2001, 10:14:37 PM »		 Reply with quote
I just thought of this - if a Y1G board uses the encrypted passwords mod... is it possible to port it to YaBBSE?
Logged
http://www.umich.edu/~ifette/mysig.swf
Joseph Fung
Global Moderator
YaBB God
*****
Posts: 4512


Keep smiling: it makes others nervous.

WWW
Re:Encrypted passwords
« Reply #1 on: December 09, 2001, 10:16:02 PM »		 Reply with quote
hmm...that's a toughie...the porter assumes the passwords are unencrypted...

how's the encryption done? if it's using crypt with the 2 first chars of the passwd as the seed - then it can be done..
Logged
Agelmar
YaBB God
*****
Posts: 931


Takako Matsu = Goddess
Re:Encrypted passwords
« Reply #2 on: December 09, 2001, 10:16:56 PM »		 Reply with quote
With the mod, it actually asks for a seed...
Logged
http://www.umich.edu/~ifette/mysig.swf
Agelmar
YaBB God
*****
Posts: 931


Takako Matsu = Goddess
Re:Encrypted passwords
« Reply #3 on: December 09, 2001, 10:18:14 PM »		 Reply with quote
I'm looking to see if I can find the documentation for the mod, gimme a sec...
Logged
http://www.umich.edu/~ifette/mysig.swf
Joseph Fung
Global Moderator
YaBB God
*****
Posts: 4512


Keep smiling: it makes others nervous.

WWW
Re:Encrypted passwords
« Reply #4 on: December 09, 2001, 10:21:24 PM »		 Reply with quote
if it's using the same seed for each password, I don't think we can do it then...
Logged
Agelmar
YaBB God
*****
Posts: 931


Takako Matsu = Goddess
Re:Encrypted passwords
« Reply #5 on: December 09, 2001, 10:22:49 PM »		 Reply with quote
Yes, it uses the same seed for all passwords... If you had the seed, could you just import the password raw and have the forum check the inputted password encrypted to the seed against the stored value (that's how the mod works if I recall...)
Logged
http://www.umich.edu/~ifette/mysig.swf
Joseph Fung
Global Moderator
YaBB God
*****
Posts: 4512


Keep smiling: it makes others nervous.

WWW
Re:Encrypted passwords
« Reply #6 on: December 09, 2001, 10:26:41 PM »		 Reply with quote
You'd have to apply a mod to the SE code - right now, the passwords are stored using the first 2 chars of the password as the seed (which is standard practice).  You'd have to change how the passwords are checked and then how the converter converts the info...
Logged
Mostmaster
Full Member
***
Posts: 184


I love all the YaBBs, but this one is the best!

mostmaster@hotmail.com WWW
Re:Encrypted passwords
« Reply #7 on: December 09, 2001, 10:27:33 PM »		 Reply with quote
yup, the password-encryption-mod uses the seed 'ya' defined in the subs.pl (if I can remember).
So its possible. We have 2 mods now for the converter.
1. convert polls
2. convert encrypted passwords..

hehe.. ;D
Logged
Agelmar
YaBB God
*****
Posts: 931


Takako Matsu = Goddess
Re:Encrypted passwords
« Reply #8 on: December 09, 2001, 10:29:44 PM »		 Reply with quote
Except that that mod would not be for the converter, but for the entire forum... the encryption is non-reversable.
Logged
http://www.umich.edu/~ifette/mysig.swf
Mostmaster
Full Member
***
Posts: 184


I love all the YaBBs, but this one is the best!

mostmaster@hotmail.com WWW
Re:Encrypted passwords
« Reply #9 on: December 09, 2001, 10:33:09 PM »		 Reply with quote
you're right.
nasty problem...
we'll find something for it.. ;D
Logged
Jeff Lewis
Global Moderator
YaBB God
*****
Posts: 10149


I'm a llama!

WWW
Re:Encrypted passwords
« Reply #10 on: December 09, 2001, 10:36:11 PM »		 Reply with quote
Hehe I do have a tool which decrypts them, just takes a long time ;)
Logged

My Amazon Wishlist
My Blog
Agelmar
YaBB God
*****
Posts: 931


Takako Matsu = Goddess
Re:Encrypted passwords
« Reply #11 on: December 09, 2001, 10:37:13 PM »		 Reply with quote
Really? Would you mind passing that my way? I could really use it, as I have a pet project I'm working on...
Logged
http://www.umich.edu/~ifette/mysig.swf
Mostmaster
Full Member
***
Posts: 184


I love all the YaBBs, but this one is the best!

mostmaster@hotmail.com WWW
Re:Encrypted passwords
« Reply #12 on: December 09, 2001, 10:41:54 PM »		 Reply with quote
With brute force.... ;D
Logged
Edwin
Guest
Re:Encrypted passwords
« Reply #13 on: December 09, 2001, 10:43:37 PM »		 Reply with quote
Quote from: Jeff Lewis on December 09, 2001, 10:36:11 PMHehe I do have a tool which decrypts them, just takes a long time ;)

Yup, in the year 2424 it's decrypted  ;D
Logged
Jeff Lewis
Global Moderator
YaBB God
*****
Posts: 10149


I'm a llama!

WWW
Re:Encrypted passwords
« Reply #14 on: December 09, 2001, 10:45:56 PM »		 Reply with quote
It's faster than that and I've used it at work...
Logged

My Amazon Wishlist
My Blog
Pages: [1] 2 Reply Ignore Print 
YaBB SE Community  |  YaBB SE Info  |  News From the YaBB SE Team  |  Encrypted passwords « previous - next »
 


Powered by MySQL Powered by PHP YaBB SE Community | Powered by YaBB SE
© 2001-2003, YaBB SE Dev Team. All Rights Reserved.
SMF 2.1.4 © 2023, Simple Machines
 Valid XHTML 1.0! Valid CSS

Page created in 0.066 seconds with 20 queries.