Many database users are missing passwords. How to clean them up?


When running the JetBackup there are a lot of "partially completed" backup failures. Upon inspection, it seems the problem is cau… | Read the rest of

FIPS compliant passwords protection/encryption? – Information Security Stack Exchange

Your privacy

By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our Cookie Policy.

chrome – Are saved passwords in browsers secure, when stored online?

Chrome stores your passwords under your Google Account. By default, they are not encrypted, so if any hacker gains access to Google’s servers, they could potentially grab your stored logins too. However, it is possible to optionally set a passphrase which will be used to encrypt your synced data. Obviously, in this case the security of your saved passwords will depend on the strength of that passphrase.

Firefox differs in that it stores your logins encrypted by default. Once again, the security of the saved passwords depends on the strength of your Firefox Account password.

In both Chrome and Firefox, once a device has been synced with your account, the saved passwords are also stored on the device.

passwords – John the Ripper works on some hash but not on another

I have two unshadowed text files, passwd1 and passwd2. For passwd1, I run john --show passwd1 and it works to crack passwd1. But for passwd2, if I run john --show passwd2, I got No password hashes left to crack (see FAQ). Why and how to crack passwd2? Thanks.





authentication – WPA/WPA2 networks without passwords

From my current understanding, WPA networks use a network’s SSID and password to produce a PSK (pre-shared-key), which encrypts/decrypts communications between the router and the client before a new key can be negotiated.

If a router does not have a set password, does this mean that the key negotiation between the router and the client is not encrypted?

passwords – Developing an extension which save typed credetials in a webpage

I am developing an extension which is a simpler version of Google Sync. and I want it to automatically save user typed in credentials and in later visits auto-fill them. But I don’t know how should I do it. Can you please help me with providing any code snippets for a function which searches and later saves username and passwords in a local database or a remote one e.g. in JavaScript?

hash – Why do some passwords not allow certain types of characters?

As @Adnan aptly point out, there is no good reason to restrict characters, but the practice isn’t going to go away soon.

One of the most egregious examples of such restrictions is what is done in the x-cart shopping cart system that many websites use. It silently truncates passwords are <. So if you give it a password like lwB<Ln#q5iDVnW!K&ZQ0u(zD, it will treat your password as lwB. Steve Thomas has described this, but I can’t find the precise source, so I will just credit him in general.)

It is clear from errors like this what the original intent was. Someone threw in a password parsing rule to prevent XSS. Obviously there are much much better ways to doing this, but this shows that some of these policies are an attempt to sanitize user provided data before doing any further processing of it.


There are good reasons to restrict passwords to US-ASCII. A user may have something like ü in their password, but sometimes they will be providing that as UTF8 and other times as Latin1 (or any other set of encodings). The user may be unaware of such distinctions.

Allow whitespace?

There is some debate about whether white space should be allowed in passwords. I’m in favor of allowing spaces as it can be useful for creating stronger, more memorable, and easier to type passphrases. But there are two reasons to be wary of spaces in passwords.

  1. Spaces are very audible when people are typing.

    On most keyboards it is easy to hear when a space versus any other key is typed. Thus someone who hears you type in your password a few times will be able to learn in which positions there are spaces. This can make cracking much easier.

  2. Stripping trailing and leading whitespace.

    We may wish to strip trailing and leading whitespace from entered passwords, as people may not know that those are there. (Possible copy/paste sloppiness, etc). So we just add confusion if we say that white space is allowed as long as it isn’t trailing or leading.

Despite these problems, I still like the idea of allowing spaces. But a lot of smart people disagree with me.


Since 2019, Infinity Marketplace starts services.
We provide comfortable interface for buying and selling, Auto purchases / Auto refund system / Hand to Hand Purchase system (Valid Hand) / Extensive search system / Quick response.
Our goal to make best solutions for buyers and sellers. It means we are doing work every day to make more visible quality of products on stock, have only verified sellers.

This is also secured platform,
Registration one click,
Contact information like a jid,tg, etc. not required,
Products encrypted,
User ticket messages encrypted.

Feel free and leave questions to us.


( Email access/ Cookies / Full info )

( SSN/ DOB / MMN / DL / Score / CR / )


other Services.

Login / Register
(TOR) http://infinityypcu7re3.onion