passwords

Result of var_dump($_POST['pass_field']) is a bunch of dashes?

Greetings, I am trying to debug a login script. So I decided to use var_ dump to print out the password. But for some reason say If I type in 'BOSTON' rather then printing 'BOSTON' it prints out six dashes, 1 dash for each character. I haven't encountered it like this before. I'm sure i'm missing something. I tried ob_ start() var_ dump...

Why does JPasswordField.getPassword() create a String with the password in it?

Swing's JPasswordField has the getPassword() method that returns a char array. My understanding of this is that the array can be zeroed immediately after use so that you do not have sensitive things hanging around in memory for long. The old way to retrieve the password was to use getText(), which returns a String object, but it has been...

Clearing Eclipse Subversion password

Eclipse/Aptana seems to remember my password that I use the access my repositories. Is there a way I can clear the stored passwords? ...

Question on Google Provisioning API and SSO Password change propagation

Hey all, I'm using the Google Apps Provisioning API to synchronize user data with our internal database (MySQL). For every new user created through our site's backend, a corresponding user in created in the GoogApp system. Change is passwords are also synchronized accordingly. I'm about to implement SSO, so that logins performed on ...

Regular Expression with atleast 1 letter and 1 number

I think its simple but I am too dumb to write one. Can someone proovide me with a regular expression that checks a given string for atleast 1 letter and atleast 1 number. Also please give some explanation. ...

i18n - Internationalization Password Complexity Rules

I'm currently working on the internationalization of a product and an issue has come up. The issue revolves around password complexity requirements for countries with non-Latin languages and complex character sets. The application uses aspnet membership for user and password management, although this might be a whole other issue. Curre...

Why isn't this password thing not working -- Batch

Hello i have this in a batch: :passw022 title batch :: Password if exist util2.txt del util2.txt cls echo Please enter your name: echo. Set name= set /p name=Name: echo %name%>> util.txt echo. echo Please enter a password you like to have: echo. Set passw= <nul: set /p passw=Password: for /f "delims=" %%i in ('cscript /nologo mask.vbs...

How To Reversibly Store Password With Python On Linux?

First, my question is not about password hashing, but password encryption. I'm building a desktop application that needs to authentificate the user to a third party service. To speed up the login process, I want to give the user the option to save his credentials. Since I need the password to authentificate him to the service, it can't b...

Running UNIX commands as different user, from Java

Trying to write a Java program capable of running a UNIX command as a different UNIX user. I have the user's password, and I know the command I want to run, but the command has to be run as that user - so I have to login as that user first. For example: say we have a user, jim, who wants to see what's in bob's home directory, and (for w...

Retrieving password when the password stored as a hash value

Can users request that their password be emailed to themselves if the password is stored as a hash value? Is there any way to convert a hash value to the clear text value with the proper information (& what information would you need)? If a user has the same password hash value stored on two sites, would their password be the same for ...

How to protect a virtual directory with a password in IIS7

I've placed a ClickOnce deployment inside of a virtual directory on a server running IIS7. I would like to be able to password protect the directory so I can test the application out on the WAN but I can't seem to find out how to set a password for the directory containing the ClickOnce app. Any help would be very much appriciated. ...

Is 5-digit PIN better than most passwords?

This is something that's been bugging me for many years: why most online services highly value the entropy of a password, citing it as a security measure, and enforcing it when users select a password? I decided to come out with this question after reading the paper "Do Strong Web Passwords Accomplish Anything?" (and, of course, classic...

Is there a way to crack the password on an Excel VBA Project?

I've been asked to update some Excel 2003 macros, but the VBA projects are password protected, and it seems there's a lack of documentation... no-one knows the passwords. Is there a way of removing or cracking the password on a VBA project? ...

Would this regular expression work?

^([a-zA-Z0-9!@#$%^&*|()_\-+=\[\]{}:;\"',<.>?\/~`]{4,})$ Would this regular expression work for these rules? Must be atleast 4 characters Characters can be a mix of alphabet (capitalized/non-capitalized), numeric, and the following characters: ! @ # $ % ^ & * ( ) _ - + = | [ { } ] ; : ' " , < . > ? / It's intended to be a password v...

Should We Mask Passwords?

From Jacob Nielson's "Stop Password Masking": Usability suffers when users type in passwords and the only feedback they get is a row of bullets. Typically, masking passwords doesn't even increase security, but it does cost you business due to login failures. What do you guys think? ...

Password Recovery without sending password via email

So, I've been playing with asp:PasswordRecovery and discovered I really don't like it, for several reasons: 1) Alice's password can be reset even without having access to Alice's email. A security question for password resets mitigates this, but does not really satisfy me. 2) Alice's new password is sent back to her in cleartext. I w...

Storing Password Reset Questions in LDAP

I want to store answers to password reset questions in LDAP. I know that the answers should be hashed with a salt. I would like insight into the following: What attributeClass should we use? Is it possible to get the LDAP server to perform the hashing operations? Is there a way to use the LDAP compare operation if the container doesn't...

How to fix subversion password config?

I want that everytime someone wants to checkout the project from SVN he/she will be prompted for credentials. This happens when someone tries to commit something, but not at checkout. Here is the svnserve.conf section : [general] anon-access = none auth-access = write password-db = passwd I figured that by setting anon-access to none...

Is there a way to set ASP.NET TextBox password char when in Password TextMode?

Hi! <asp:TextBox TextMode="Password" runat="server" /> I want that when the user types in text, it should show • rather than a simple asterisk, is there a way (in win-forms' TextBox there is a property PasswordChar, what is it's similar in web)???? ...

Best way to store password in database

I am working on a project that has to have authentication (user name/pass) It also connects to a database so i figured i would store the user name and password there but it seems like not such a good idea to have passwords as just a text field in a table sitting on the db I'm using C# and connecting to a 2008 express server. can anyon...