passwords

Building User ID/Password Functionality with Ruby on Rails? Overkill?

Hi, I am new to this community, but I am working on a site that requires implementation of a user/password/register check upon entry, which would check against a database, or write to the database, in the case of registration. I have experience with XHTML and CSS, and just discovered RoR. I honestly have very little insight into how to a...

Is there a way I can retrieve sa password in sql server 2005

I just forgot the password. Can anyone help me how to get back the password. ...

Best Password Management Software for Development Group - looking for suggestions

Our development and consulting teams (about 25 people) are looking for software to manage all of the passwords we have for our organization and for our clients. We looked at Keepass but it is not truly a database system nor does it have support for multiple concurrent updates. Needs: -Uses database (versus shared text / XML file) -Ab...

Two PHPBB questions

Hello, I was wondering if i could get some help with two questions I have: Firstly, is is possible, assuming I have a random variable to load up two different registration screens? Ie. one with and without the captcha? or one with and without some other stuff i would like to use? Secondly, is it possible to have a second log in box? ...

How would you implement salted passwords in Tomcat 5.5

My web application is relying on container-managed security and I'm wondering if it's possible to use salted passwords at all. As far as I can tell it's easy enough to store digested passwords in a database by just configuring a JDBC or DataSource Realm, but there's no way to add a salt to those digest. Any suggestions? Edit: it seems...

Best Online Password Manager?

I work for a team that's looking for a replacement for our online password management package, which we use to keep track of various ftp accounts and so on. Our current solution is shaky at best (it's PHP-based, the master password is hardcoded into the login checking function, etc). A lot of the passwords are out of date anyway, so we...

Password hashing in a C# Windows app, absent ASP.NET's FormsAuthentication?

My Win form app doesn't seem to like FormsAuthentication, I'm totally new to hashing so any help to convert this would be very welcome. Thanks. //Write hash protected TextBox tbPassword; protected Literal liHashedPassword; { string strHashedPassword = FormsAuthentication.HashPasswordForStoringInConfigFile(tbPassword.Text, "sha1"); ...

My images ask for a password to the local network (Under ASP/IIS)

Not quite sure how to troubleshoot this. I'm maintaining an ASP site, its mostly static, but there's this one include page which brings the menu. Just recently I replaced some images, but now when I try the site, I get a prompt for a password as if It were looking for something on the local network! I checked, all image paths are writ...

Recovering VBA password for Access 2000 file

It's the usual story, Access 2000 file created by former employee who protected the VBA code with a password. Now, some time later, the VBA code needs to be changed and we're unable to extract the password from the former employee. Searching online gives dozens of tools claiming to recover VBA passwords, but they have a wiff of Trojan a...

Protecting user passwords in desktop applications

I'm making a twitter client, and I'm evaluating the various ways of protecting the user's login information. Hashing apparently doesn't do it Obfuscating in a reversable way is like trying to hide behind my finger Plain text sounds and propably is promiscuous Requiring the user to type in his password every time would make the applicat...

Protecting user passwords in desktop applications (Rev 2)

I'm making a twitter client, and I'm evaluating the various ways of protecting the user's login information. IMPORTANT: I need to protect the user's data from other other applications. For example imagine what happens if a bot starts going around stealing Twhirl passwords or Hotmail/GMail/Yahoo/Paypal from applications that run on the u...

Encryption with C# and Objective-C

What's a good encryption algorithm that will allow me to specify a password to encrypt text? I'm assuming the standard algorithms out there will work cross-platform but I do need the algorithm to work in C# and Objective-C - is anyone familiar with any samples for Objective-C? Thanks ...

Make python enter password when running a csh script

I'm writing a python script that executes a csh script in Solaris 10. The csh script prompts the user for the root password (which I know) but I'm not sure how to make the python script answer the prompt with the password. Is this possible? Here is what I'm using to execute the csh script: import commands commands.getoutput('server sto...

Why is a password salt called a "salt"?

Is there a significance to the word "salt" for a password salt? ...

MySQL: what data type to use for hashed password field and what length?

I'm not sure how password hashing works (will be implementing it later), but need to create database schema now. I'm thinking of limiting passwords to 4-20 characters, but as I understand after encrypting hash string will be of different length. So, how to store these passwords in the database? ...

Sql Server 2005: what data type to use to store passwords hashed by SHA-256 algorithm?

In Sql Server 2005 what data type should be used to store passwords hashed by SHA-256 algorithm? The data is hashed by the application and passed to the database ...

Best practices for storing database passwords

I have a database that many different client applications (a smattering of web services, some java apps and a few dot net applications) connect to. Not all of these are running on windows (Sadly, otherwise it would make this an easy answer question with just enabling windows authentication for database connections). At the moment, the pa...

Apache/.htaccess - password-protecting a domain but whitelisting certain URIs within it

So here's what I'd like to do: access to http://example.com/* would require the user to enter a username/password, except when they go to a certain URIs (e.g. http://example.com/contact/ , http://example.com/blog/, etc.) they shouldn't have to authenticate. http://example.com (the root) should be open, too. I know I've got to set up so...

MySQL Hashing Function Implementation

I know that php has md5(), sha1(), and the hash() functions, but I want to create a hash using the MySQL PASSWORD() function. So far, the only way I can think of is to just query the server, but I want a function (preferably in php or Perl) that will do the same thing without querying MySQL at all. For example: MySQL hash -> 464bb2cb3...

Storing Passwords in reversible form

I have a PHP app that needs to run bash scripts, and provide a username & password (for remote systems). I need to store these credentials somewhere that is accessible by my PHP (web) app. The logical place is the database (currently MySQL, but will be agnostic). The problem with the "standard" way of hashing and storing the credentials,...