passwords

MySQL and PhpMyAdmin config.inc.php Password issue on MAMP

孤者浪人 提交于 2019-12-04 18:51:13
This is a very strange issue that is similar to a few other people issue that has been going on for a while with MAMP. I recently upgraded to MAMP2 and followed the instruction for the new phpMyAdmin and it work for a while but recently whenever I try to connect to MySQL I always get this error: Error: Could not connect to MySQL server! /Applications/MAMP/Library/bin/mysqlcheck: Got error: 1045: Access denied for user 'root'@'localhost' (using password: YES) when trying to connect So I changed the password to the correct one and changed all the files as per advised on this forum topic: http:/

Password encryption and decryption in Google app engine

可紊 提交于 2019-12-04 18:48:50
How can I encrypt and decrypt a password in Google app engine without using third party libraries? Any examples? If you care about your users' security, you're going to have to use a third-party library of some sort, because the only way you should be storing passwords is securely hashed with PBKDF2, SCrypt, or BCrypt - for instance, using this module , which you can easily add to your application. Note that you should never encrypt passwords (and thus, never decrypt them) - instead, algorithms like PBKDF2 use hashing so that you can check if a password is valid, but never recover the original

Generate SHA256 hash in Objective-C

假装没事ソ 提交于 2019-12-04 18:03:54
问题 So I need to generate a Sha256 password in Objective-C, and can't figure out for the life of me how to do it! Is there something easy I'm just missing? I've tried implementing the following method (which was written for iPhone, but I figured maybe it'd work cross-platform, as some Objective-C code does) -(NSString*)sha256HashFor:(NSString*)input { const char* str = [input UTF8String]; unsigned char result[CC_SHA256_DIGEST_LENGTH]; CC_SHA256(str, strlen(str), result); NSMutableString *ret =

Why is “Forgotten Password” bad?

*爱你&永不变心* 提交于 2019-12-04 18:00:18
问题 I came across this statement Do not use "forgotten password" functionality. But if you must, ensure that you are only providing information to the actual user, e.g. by using an email address or challenge question that the legitimate user already provided in the past; do not allow the current user to change this identity information until the correct password has been provided. Can someone clarify why forgotten passwords are a risk? I plan to handle it by sending the user a link in their email

How to disable MySQL root logins when no password is supplied?

好久不见. 提交于 2019-12-04 17:40:17
问题 MySQL is installed on my laptop and it works fine, except that I am allowed to log in without supplying the root password. I can also log in by supplying the root password. If the supplied password doesn't match, it denies access. The root password was changed to something of my own choosing when I originally installed MySQL. I just noticed the no-password logins today. So, I need to stop access to the root account when a password isn't supplied. What I've tried so far is to reset the root

Handling hashed passwords stored as varbinary in SQL Server and classic ASP

亡梦爱人 提交于 2019-12-04 17:21:33
All, Sorry in advance - I'm a novice in most of the topics below (SQL, ASP). Anyway... I've got a pretty simple web app that requires users to log in with a user name and password. The front end creates a salted SHA1 hash of the password, and posts it (along with the user's name) to an ASP page. That ASP page takes the data, calls a stored procedure in the SQL Server database, and passes the users name and hashed password; the stored procedure writes the info to the 'users' table. The password column's type in the table is varbinary. As far as I can tell, when the ASP gets the password

Migrating Existing Users and Passwords to new Symfony/sfDoctrineGuard User System

落花浮王杯 提交于 2019-12-04 16:21:00
I have an existing, non-framework-based PHP/MySQL website. It has a simple security model, with a users table with usernames and hashed (MD5) passwords. I'm currently working on "version 2" of this site, this time using Symfony, with Doctrine. The new version is working fine, and I'm using the sfDoctrineGuard plugin for my user management. I'd like to migrate my existing users into the new app with the minimum of fuss, retaining their existing usernames and passwords. My main problem, though, is that I'd like to change the password hash I'm using. The current site uses unsalted MD5 hashes of

Passwords in Emacs tramp mode editing

◇◆丶佛笑我妖孽 提交于 2019-12-04 16:18:59
问题 I'm using emacs tramp mode to remotely edit files over ssh. The problem is that every time I save the file I'm editing I have to enter my user password. I find that very annoying. How can I write my password only once / editing session? 回答1: Ah, from the tramp docs on password caching you can set: (setq password-cache-expiry nil) which requires the package password-cache.el. Also, in the tramp sources, it mentions reading the ssh-agent(1) man page, which shows how to set it up so that you don

What mechanisms does ssh-agent use to keep unlocked private keys secure in memory?

 ̄綄美尐妖づ 提交于 2019-12-04 14:57:37
I'm working on a library to make quick access to KeepassX database files easier for power users. Right now the application is so short-lived in memory that security around the unencrypted KeePass database is not a huge concern. However, I'd like to add the ability to hold the database unlocked for a period of time in the background, similar to the way the KeepassX GUI does. This would allow immediate query of passwords without being prompted for the master password. This means there would be sort of daemon process that holds the database in memory and communicates with a client. It seems that

PHP/PAM to change user password?

删除回忆录丶 提交于 2019-12-04 14:03:46
问题 Are there any working packages to change a linux user passwords using PHP? I've tried using PECL:PAM but theres an error when it tries to change the password. Edit: PHP code: echo pam_chpass($username, $password, $new_pass, &$error) ? 'good' : $error; PHP (echo) output: Permission denied (in pam_authenticate) From /var/log/auth (these are actually from before, the log doesn't seem to be working ATM for some reason yet to be determined): Jun 11 15:30:20 veda php: pam_unix(php:chauthtok):