#exult@irc.freenode.net logs for 20 Feb 2004 (GMT)

Archive Today Yesterday Tomorrow
Exult homepage


[00:31:01] --> EsBee-Eks has joined #exult
[00:31:02] <-- sbx has left IRC (Read error: 104 (Connection reset by peer))
[01:08:06] <-- Dominus has left IRC ("a pooka invited me for a drink")
[01:09:08] --> florent has joined #exult
[01:13:55] --> Baastuul_ has joined #Exult
[01:14:16] <-- Baastuul has left IRC (Nick collision from services.)
[01:14:17] --- Baastuul_ is now known as Baastuul
[01:45:38] <-- Andersen has left IRC ("FUTUE TE ET IPSUM CABALLUM")
[01:49:06] --> sbx has joined #exult
[01:49:07] <-- EsBee-Eks has left IRC (Read error: 104 (Connection reset by peer))
[02:12:58] <Baastuul> Hmmm.
[02:13:05] <Baastuul> It seems I made an Exult forum account a long time ago.
[02:13:12] <Baastuul> I don't remember the password, is there a way to retrieve it?
[02:15:14] <-- sbx has left IRC (Read error: 104 (Connection reset by peer))
[02:28:18] <-- Baastuul has left IRC ("Bye.")
[06:55:04] <-- florent has left IRC (Read error: 104 (Connection reset by peer))
[06:55:51] --> Cahaan has joined #exult
[07:03:42] <-- Cahaan has left IRC (Read error: 104 (Connection reset by peer))
[07:54:05] --> gt2 has joined #exult
[12:00:13] <-- gt2 has left IRC (Connection timed out)
[12:06:53] --> Cahaan has joined #exult
[12:22:57] <-- Cahaan has left IRC (Read error: 110 (Connection timed out))
[12:50:38] --> Andersen has joined #exult
[14:11:45] --> Colourless has joined #Exult
[14:11:45] --- ChanServ gives channel operator status to Colourless
[14:12:40] <Colourless> hi
[14:24:33] <wjp> hi
[14:49:23] <Colourless> you know, I'm curious about how various forum software stores user passwords. If the software can email out a lost password, then you would have to assume the password is being stored as plain text or something that can easily be converted to plain text. The assumption then is if the system is compromised then an intruder can gain access to the passwords of all the users.
[14:50:01] <Colourless> To me, that does sort of seem wrong
[14:54:13] <wjp> our forum stores them hashed
[14:54:15] <wjp> not sure about others
[14:54:51] <wjp> what you'd probably want to do about lost passwords, is allow sending some kind of temporary new "password" to the registered email address
[14:55:10] <wjp> if the user enters this "password" on a special page, allow him to change his password
[14:55:11] <Colourless> yeah, i've seen some forums do that
[14:55:51] <wjp> (but do not change the password directly when sending the mail)
[15:02:13] <-- Colourless has left IRC ("bbl, maybe")
[17:20:45] <-- Kirben has left IRC (Read error: 104 (Connection reset by peer))
[17:27:21] --> gt2 has joined #exult
[21:24:32] <-- gt2 has left IRC (Read error: 60 (Operation timed out))
[23:03:30] --> SB-X has joined #exult
[23:33:16] --> sbx has joined #exult
[23:33:16] <-- SB-X has left IRC (Read error: 54 (Connection reset by peer))
[23:53:34] --> EsBee-Eks has joined #exult
[23:53:35] <-- sbx has left IRC (Read error: 54 (Connection reset by peer))