Someone sound the metalface alert!

 

-----signature-----

That must be only during registration. The form emails it to you like a savant, and doesn't store the plaintext in the DB or in any way it could be fetched by me or anyone else.

In the DB, passwords are hashed through MD5. I cannot read the plaintext. This is a 32 character string of gibberish looking characters that have no recognizable pattern to human eyes.

It *is* possible to brute force MD5 codes, given a particular MD5 value; however, if you make your password at least 10 characters long and include a special character, number, and/or one more more capitalized characters, the brute force time can take weeks/months/many years to crack.

On the modern internet it is not wise to have short passwords that are only lowercase letters for anything important.

If it bothers anyone that the email is sent with the password in plaintext, I could likely have the savant form strike that part out.

 

-----signature-----

I used a different password than I ever use anywhere else because I know that Sinlock is evil and devious.

 

-----signature-----

Meh - fixed. Registration confirmations no longer include plaintext passwords.

 

-----signature-----

I have been known to crack MD5 passwords; that said, if you keep it 10 characters (11 or even 12 is better) with at least one special character/number/cap letter, then it can take YEARS to brute force.

Rainbow tables are another matter. I haven't played with them much, but I understand they are very effective.

Just use unique passwords for sites and there would never be a problem here or anywhere.

 

-----signature-----

Fix your create new account link.

 

-----signature-----

What's not working about it? We've had a ton of people register, and I just tried it - appears to be working fine.

 

-----signature-----

When I click on create new account it just loads the main page again.

 

-----signature-----

Don't crack it, man. Just put code to save it in plain text in your private database

 

-----signature-----

I believe I know the issue and will PM you privately. Look for a message in about 45 seconds!

 

-----signature-----