
Simpeman
|
Posted - 2006.05.16 08:09:00 -
[1]
Originally by: Nightblade
Originally by: Kaylana Syi If you think they are going to comment and reveal secrets other than telling you case sensativity is back you people are kidding yourselves.
The point is you can't change from being case insensitive to being case sensitive if the passwords were hashed. They gave us that information.
Now, it would have been different if they had said, "If you were using some upper-case letters in your password before, you'll have to enter it all as lower case unless you go to the website and change your password." If they had said that, we'd know they were using hashing. Instead, they indicated it was an issue with the server config, and you had to make sure you're using the correct case now.
Anyway, I'm not expecting CCP to reply to this, but I am expecting them to acknowledge, at least to themselves, that they did mess up, and fix it. This thread has probably accomplished that.
Just because you or anyone else might not believe efforts should be made towards security doesn't make the rest of us unjustified. And it doesn't help to blindly believe that CCP are gods, they do make mistakes, just like everyone else. So by consequence every decision they make is not necessarily the best one.
They have to go with the lowest common denominator. Having more security doesn't hurt the people who don't care, but having less does hurt the people who do care.
I beg to differ. Think that the database system contains a hashed lookup function based on a key. Tadaa, a server config makes it always return lowercase and another makes it return the true value. There's more than just MSSQL that does this kind of things if I remember correctly. My guess is that the passwords in the end are compared as in text to match correctness as in wether or not the user typed the right password. Though this is not optimal, it is done in many cases.
/Simon, CS Major Maths minor PhilMag. (And yes, I've studied cryptography and also databases) ---- I'm the slap in your face that awakens you from your hot sexy wet-dream. |