passwords

Imitate a password-type input while using a contenteditable div

一曲冷凌霜 提交于 2019-12-05 05:36:19
I'm using contenteditable divs instead of input elements, because they are more flexible when it comes to styling within the input box. I'm just wondering if there's a way to make the input look like an input element with its type set to password, like so: <input type='password'> I hope that is clear enough. Thanks. you will have to find out the browser specific CSS settings for mozilla and co.. but in webkit it looks like this. also you need to add the keypress handler via javascript for it. <style> #password { -webkit-text-security: disc; height:20px; width:100px; -webkit-appearance:

How to store passwords offline

我只是一个虾纸丫 提交于 2019-12-05 05:21:07
问题 Although this is focused on Windows Phone 7, I guess the principle is universal. I would like to have a password protected zone within my app. However, my application is completely offline and so I will have to store credential details on the phone. My initial idea is to store a hash of the password and the salt. Would this be the best way to go? If so, should the hash and salt be stored in plain text, or is there a way to ensure that even they are encrypted? I understand that having the

How to transform phrases and words into MD5 hash?

会有一股神秘感。 提交于 2019-12-05 05:03:26
问题 Can anyone, please, explain to me how to transform a phrase like "I want to buy some milk" into MD5? I read Wikipedia article on MD5, but the explanation given there is beyond my comprehension: "MD5 processes a variable-length message into a fixed-length output of 128 bits. The input message is broken up into chunks of 512-bit blocks (sixteen 32-bit little endian integers)" "sixteen 32-bit little endian integers" is already hard for me. I checked the Wiki article on little endians and didn't

Django password in PHP

限于喜欢 提交于 2019-12-05 04:16:20
问题 I have a problem, because I have a database with users and theirs passwords were secured with Django (pbkdf2). So '123' looks like this: pbkdf2_sha256$20000$MflWfLXbejfO$tNrjk42YE9ZXkg7IvXY5fikbC+H52Ipd2mf7m0azttk= Now I need to use this passwords in PHP project and I don't have any idea how to compare them. 回答1: pbkdf2_sha256$20000$MflWfLXbejfO$tNrjk42YE9ZXkg7IvXY5fikbC+H52Ipd2mf7m0azttk= Let's break this down. The $ are separators: pbkdf2_sh256 means PBKDF2-SHA256, i.e. hash_pbkf2('sha256',

Good cryptographic hash functions [duplicate]

扶醉桌前 提交于 2019-12-05 03:45:01
Possible Duplicate: Secure hash and salt for PHP passwords I am making a website, and I need a secure algorithm to store passwords. I was first thinking of bcrypt, but then I found out my host did not support it and I am not able to change host. My host allow this encryption: Standard DES And these hashes: MD5 md2, md4 & md5 sha1, sha256, sha384 & sha512 ripemd128, ripemd160, ripemd256 and ripemd360 whirlpool tiger128,3, tiger160,3, tiger192,3, tiger128,4, tiger160,4 & tiger192,4 snefru gost adler32 crc32 & crc32b haval128,3, haval160,3, haval192,3, haval224,3, haval256,3, haval128,4, haval160

Powershell Secure password to work on any machine

天大地大妈咪最大 提交于 2019-12-05 03:29:20
I need to write a powershell script that i can run on any machine to connect to a server. Does the secure-string encrypt using the machine or user i.e will a secure password work on any machine in the domain or can it only be decrypted on the machine it was created on. If it is the latter is there away to encrypt the password so i can run the script on any machine To work on other machines you'll need to create a key for use with the ConvertTo-SecureString and ConvertFrom-SecureString cmdlets. PS C:\> $Key = (3,4,2,3,56,34,254,222,1,1,2,23,42,54,33,233,1,34,2,7,6,5,35,43) PS C:\>

Importance of the key size in the Rfc2898DeriveBytes (PBKDF2) implementation

杀马特。学长 韩版系。学妹 提交于 2019-12-05 03:16:24
This is the code I use to "hash" (or derive key as called in the PBKDF2 implementation of the PKCS standard) passwords strings with the Rfc2898DeriveBytes class provided in .NET: int saltSize = 256; int iterations = 1000; int keySize = 20; // The parameter I'm not sure of var deriveBytes = new Rfc2898DeriveBytes("mypassword", saltSize, iterations); byte[] salt = deriveBytes.Salt; byte[] key = deriveBytes.GetBytes(keySize); Now, I understand that the salt size doesn't matter much (as long as it is enough to ensure that random salts will be unique), but what about the key size? Does a longer key

Java – How can I Log into a Website with HtmlUnit?

六月ゝ 毕业季﹏ 提交于 2019-12-05 03:14:02
问题 I am writing a Java program to log into the website my school uses to post grades. This is the url of the login form: https://ma-andover.myfollett.com/aspen/logon.do This is the HTML of the login form: <form name="logonForm" method="post" action="/aspen/logon.do" autocomplete="off"><div><input type="hidden" name="org.apache.struts.taglib.html.TOKEN" value="30883f4c7e25a014d0446b5251aebd9a"></div> <input type="hidden" id="userEvent" name="userEvent" value="930"> <input type="hidden" id=

What is base64 clear text username and password?

淺唱寂寞╮ 提交于 2019-12-05 02:08:53
问题 Recently I came across this word in a basic authentication article. What it meant by base64 clear text usrname and password on the network? Thanks 回答1: It means encoding the username and password using base 64. The result won't look too much like your username and password but it's pretty easy to reverse the operation to get the plain text. See here for details on base 64 encoding http://en.wikipedia.org/wiki/Base64 For example the string password encoded in base 64 is cGFzc3dvcmQ= This

Why do so many sites disallow the use of non-alphanumeric characters in passwords?

倾然丶 夕夏残阳落幕 提交于 2019-12-05 02:08:25
When going through registration, a lot of sites will disallow the use of symbols in passwords. This drives me up the wall from a usability perspective since I include multiple symbols in all my passwords, and as a programmer that deals with web authentication from time to time, I can't figure out why it wouldn't be allowed. Am I missing something? Are they worried about SQL injection? Don't want to deal with escaping characters? Or is there something with non-Latin-alphabet characters that can mess things up? Similar question, about sites that restrict length here . Laziness, 2. Using legacy