lol i have a weird question

aznsamaritan · Post by **aznsamaritan** » Sat Jun 18, 2005 2:20 am

red do u know ALL of our passwords????:D

Archived topic from Iceteks, old topic ID:3415, old post ID:27488

Red Squirrel · Post by **Red Squirrel** » Sat Jun 18, 2005 2:29 am

Yeah, but I cheat, lot of them I use for more then one thing.

Archived topic from Iceteks, old topic ID:3415, old post ID:27492

aznsamaritan · Post by **aznsamaritan** » Sat Jun 18, 2005 2:33 am

LOL!!!so....we should havea private discussion about ppl later..

Archived topic from Iceteks, old topic ID:3415, old post ID:27493

Red Squirrel · Post by **Red Squirrel** » Sat Jun 18, 2005 2:36 am

Oh I miss read, you said "our". Actually no I don't, it's all hashed in the database. But if I was to post a hashed version, it's still possible to use it to log in as that user, but is more involved then just plugging it in somewhere. You either have to somehow edit your browser's cookie, or just use telnet and use the cookie: header.

Really, something I considered, even if you login to a https connection, if someone catches the right packets, they can probably resend them and login, but I assume https /ssl is more advanced then just encryption, it probably also generates a random key for that time.

Archived topic from Iceteks, old topic ID:3415, old post ID:27494