Re: [aur-dev] [PATCH] Support for salted passwords

2010-04-15 Thread Simo Leone
I don't want to confuse the issue by introducing another, but while we're on the topic... A salt is exactly what Dan described, the salt value is not secret, in fact it's usually stored right next to the hashed password, or concatenated to it, in many cases. To put it in a more concrete sense

Re: [aur-dev] [PATCH] add search only by name and use it as default

2010-04-15 Thread Loui Chang
On Wed 10 Mar 2010 20:01 +0100, Andrea Scarpino wrote: > On Wednesday 10 March 2010 19:50:25 Nathan Wayde wrote: > > Please don't make it name-only by default, the search is crappy enough > > already without the extra effort to make it kinda-work-sorta. > I think is better to search by name as def

Re: [aur-dev] [PATCH] Support for salted passwords

2010-04-15 Thread Dan McGee
On Thu, Apr 15, 2010 at 2:00 PM, Loui Chang wrote: > On Mon 05 Apr 2010 09:50 -0400, Denis Kobozev wrote: >> Here's a patch that adds support for storing salted passwords in the >> database. The salt is a random string for each user and is stored >> along with the password in the Users table. Salt

Re: [aur-dev] [PATCH] Support for salted passwords

2010-04-15 Thread Loui Chang
On Mon 05 Apr 2010 09:50 -0400, Denis Kobozev wrote: > Here's a patch that adds support for storing salted passwords in the > database. The salt is a random string for each user and is stored > along with the password in the Users table. Salt is created and > password is salted when old users log i