View Full Version : A few ?'s
Kelraz Bladesinger
06-30-2004, 10:37 PM
First, who has access to what we set our password as and all that stuff. Before it was the ezboard admins, who is it now? I was a retard and used my EQ password, realized this and just changed my EQ password. This could also pertain to personal information that was required to subscribe here (birthday) which can be used to get EQ passwords and shit like that -- just a security issue.
Secondly, I know Silentcerri asked to become mod of the old boards and keep them running on ezboard if people prefered. Whats gonna happen to that?
Sanchek
06-30-2004, 10:52 PM
No one has access to your password. Not here and especially not on EZBoard. You can change it here anyway, if you want.
The old boards will remain as they currently are, pointing traffic here.
Kelraz Bladesinger
07-01-2004, 03:40 AM
thx :) wanted to be safe and all!
Malse
07-01-2004, 04:57 AM
Nobody has access to your password here or at EZboard. Don't they teach college kids anything anymore?
It's stored in a one-way hash, like any other password system on the planet other than Microsoft's and those designed by CS101 rejects (like many websites and EQ).
Speaking from experience as having broken into a PHPBB system, despite the otherwise pathetic security the password hashes were virtually uncrackable (on the order of several years for a realistic chance at getting just one out of a hundred user passwords on commonly available systems).
Rybit
07-02-2004, 05:46 AM
First, who has access to what we set our password as and all that stuff. Before it was the ezboard admins, who is it now? I was a retard and used my EQ password, realized this and just changed my EQ password. This could also pertain to personal information that was required to subscribe here (birthday) which can be used to get EQ passwords and shit like that -- just a security issue.
Secondly, I know Silentcerri asked to become mod of the old boards and keep them running on ezboard if people prefered. Whats gonna happen to that?Kelraz,
Your concerns are certainly valid. As a good practice, please do not use the same password for anything important. You should have an e-mail password, a work password, an EverQuest password--but all your passwords should be different.
Your birthday is required for us to comply with the Child Online Protection Act because we do not accept registrations for those under 13. We only require it for you to register. After that, it is your choice whether or not you would like to keep it in the database.
We are drafting a privacy policy which will explain how we use your information. Only the information you choose to give us and your IP address (used only for security purposes) will be stored in the database.
We do not require you to register. It's your call, after all.
In terms of cracking into the system, vBulletin allows you to make five attempts to login. Should you fail, you must wait fifteen minutes before you will be allowed to make another attempt to login. As for your password, it is one-way hashed and salted. That means your password has been irreversibly encrypted through the MD5 algorithm, and there is no way to retrieve it should you forget your password. The best a person can do is copy the hashed password to try to "compromise" your bulletin board account. But they wouldn't be able to retrieve your password.
The old boards will remain as it is. In the future, we hope to make this site "www.ayonae.ro." We have so much planned. Stay tuned.
Kelraz Bladesinger
07-06-2004, 12:38 AM
Don't they teach college kids anything anymore?
I know that green is cool and red is warm. Oh, and that the sorenson codec compresses video pretty good for the web. Thats about it :(
Thanks Rybit, I was away from the boards for a few days and missed your post -- basically I was just curious, and while I doubted there was ever any problems I wanted to be safe. Better safe than sorry, and all that jazz.
Bobdiggler Dirkson
07-06-2004, 05:46 AM
it doesnt just compress, it squeezes omg!
Fazin
07-06-2004, 06:59 AM
1) One-way encryption is pretty secure, but just make sure you aren't using anything simple, for example "apple" as your password... or even further down the retard line... using your username for your password.
2) Never PM your info to anyone else using these boards. Literally PM's are stored in plain text in the database that drives the boards. phpBB has had issues with more or less "not-so-thought-out" code allowing one person to view another's inbox for example. Often times this is the main source of "hacked EQ accounts" when related to message boards.
Thormir
07-06-2004, 10:20 AM
omgIk155edagirl! was a silly EQ password anyway, Kel. =)
Kelraz Bladesinger
07-06-2004, 12:01 PM
Fazin did hack it. Apple was my password, and I changed it to Kelraz :(
vBulletin® v3.8.1, Copyright ©2000-2012, Jelsoft Enterprises Ltd.