CodeVerge.Net Beta


   Explore    Item Entry   Register  Login  
Microsoft News
Asp.Net Forums
IBM Software
Borland Forums
Adobe Forums
Novell Forums

MS SQL 2008 on ASP.NET Hosting
Free 3 Months



Zone: > NEWSGROUP > Asp.Net Forum > starter_kits_and_source_projects.classifieds_starter_kit Tags:
Item Type: NewsGroup Date Entered: 9/21/2006 3:01:19 PM Date Modified: Subscribers: 0 Subscribe Alert
Rate It:
(NR, 0)
XPoints: N/A Replies: 2 Views: 14 Favorited: 0 Favorite
Can Reply:  No Members Can Edit: No Online: Yes
3 Items, 1 Pages 1 |< << Go >> >|
voodoo9055
Asp.Net User
Password Recovery Changes the Password?9/21/2006 3:01:19 PM

0/0

I tried to do a test of the password recovery.  Afterwards,  I am not able to log back in with the old password anymore.  Does the password recovery change the password?
Kadjiokou
Asp.Net User
Re: Password Recovery Changes the Password?9/21/2006 6:39:07 PM

0/0

 

Hi V,

You are correct. Your password is never stored in its original form . This is a security measure. The membership just doesnt accept password in cleartext.

Only the one way hash value is stored( by definition ireversible). This mean that what is sent to you is the hash value of your original password. The later process in turn break some of the security as the password(Hash of original password) is sent in clear text. It can theoretically be snooped.

 You can use the <machineKey/> tag to tell the membership service to store password in encrypted form. Then it can later be decripted and you can see the original form.

 But in my opinion you are not better off in term of security.

Ideally, a password reset link should be sent to your email so you can choose a new password.

 This is in my opinion a security threat to the way the login control is currently designed.

 

Thanks

/Kadji

voodoo9055
Asp.Net User
Re: Password Recovery Changes the Password?9/21/2006 7:51:25 PM

0/0

Now I see.  Thank you Kadijokou.  
3 Items, 1 Pages 1 |< << Go >> >|


Free Download:

Books:
Troubleshooting Your PC for Dummies Authors: Dan Gookin, Pages: 366, Published: 2008
Windows XP Timesaving Techniques For Dummies Authors: Woody Leonhard, Justin Leonhard, Pages: 590, Published: 2004
Windows Vista Timesaving Techniques for Dummies Authors: Woody Leonhard, Pages: 560, Published: 2007
Professional ASP.NET 3.5: In C# and VB Authors: Bill Evjen, Scott Hanselman, Devin Rader, Pages: 1673, Published: 2008
Master Visually Microsoft Windows Vista Authors: Rob Tidrow, Pages: 573, Published: 2007
CISSP: Exam Guide Authors: Shon Harris, Pages: 1145, Published: 2008
Windows XP: Visual QuickStart Guide Authors: Chris Fehily, Pages: 496, Published: 2003
Windows Server 2003: The Complete Reference Authors: Kathy Ivens, Rich Benack, Christian Branson, Pages: 1008, Published: 2003
Cisco Field Manual: Router Configuration Authors: Dave Hucaby, Steve McQuerry, Pages: 657, Published: 2002
Find Gold in Windows Vista: Where the Bodies are Buried Authors: Dan Gookin, Pages: 504, Published: 2007

Web:
Online Password Reset Note: If you are an ICQ user you will need to go to Retrieve ICQ# and Password. Screen Name or E-mail:. Image:. Can't see this image? Word in Image: ...
Fasthosts customers blindsided by emergency password reset • The ... Nov 30, 2007 ... As a result, in order to totally protect all of our and your customers, we have today implemented an automatic password change. ...
Forgot the Administrator's Password? - Change Domain Admin ... Related articles. You may find these related articles of interest to you:. Change Recovery Console Password · Change User Password from a Remote Computer ...
Debian Project -- Lost or Forgotten password The daemon will then respond with a new randomized password encrypted with your key. You can then use the SSL Web pages to change your password to something ...
Resetting Your Password « WordPress Codex A message is displayed noting the changed password. An email is sent to the blog administrator with the changed password information. ...
Change and Reset MySQL root Password » My Digital Life Jun 6, 2006 ... Other then the ways specified here to reset and change the root password for mySQL database in the case that the password is forgotten or ...
Offline NT pw & reg-editor, bootdisk No changes to the passord/registry edit program (chntpw) since last release. .... Other places to go for password and disk recovery ...
Last Name* DOE > Access. Welcome to the Password Reset Tool. Please provide the information below in order to reset your password. ...
Distinguishing Between Reset Password and Change Password Discover the difference between two password-related permissions.
A@PC: Windows Password Recovery Software. Reset Administrator ... Active@ Password Changer is a password recovery software designed for resetting local administrator and user passwords on Windows XP / VISTA / 2003 / 2000 ...

Videos:
Try it Yourself: Episode 8 - Reset WINDOWS XP admin PASSWORD High Quality Version: http://dillonp23.net/videos/tiy/tiy8.mp4 This is my EIGHTH episode of 'Try it Yourself' that I have made. Try it Yourself tea...
Windows Xp password reset or change! Download Hirens Boot CD HERE - http://w12.easy-share.com/923727.html
How to reset or change forgotten password on windows xp This is going to be a fast tutorial on reseting a password or changing a password and making a hidden folder. For part two the code is alt 0160 Sub...
Xp password reset trick FULL INFOMATION I have seen a lot of videos on here that tell you a load of old rubbish about how to change someone's password on a computer, well this video gives y...
How to change MSN password http://www.reactive-software.com/how-to-change-msn-password.html This video shows how to change my MSN password (yours too!). We also cover cases whe...
To change your password Watch this video to learn how to change your password for your Google Account.
How to change Facebook password http://www.reactive-software.com Short tutorial that explains how to change my Facebook password
Reset an Administrators User Password in Windows Vista, MMC Use the MMC command to reset an administrators password in Windows. ***I'm not saying you should do this, but it is helpful.***
Creating a Password Reset Disk in Windows Vista This is a simple tutorial, step-by-step to make a password reset disk to restore or change your forgotten or expired password in Vista. I used an iPo...
Password Management for Windows and Beyond Today organizations must increase security, making it necessary for them to require employees to use complex passwords and change those passwords fre...




Search This Site:










fckeditor reaction late

best way to handle date intensive web application

fetching name of images from folder and showing it into listview

getting user input from dynamic created controls

sending email

how to go to previous page and reload it without losing viewstate?

how to print image using c#?

sending e-mail c#

disable label on checkbox

how do i top a selected item in asp.net listbox?

can i just stop the code and wait???

html web controls

play sound (.wav file) under certain condition, on client side instead of server side...

how do you access a users profile from a base class?

emailing content of an asp .net page

dates

parsing and storing data asp.net, c#

thread was being aborted???

how to get innertext from iframe (on server-side / on client-side)

image upload

strange control/page behaviour

event firing order problem

calendar controls - prepackaged solution?

can i use server.transfer on controls other than a textbox?

how do i get an event, that was fired from a button in a template in my server control?

text box con't on next line on enter

how do i get final response through httpwebrequest

for each loop in asp.net

menu control in asp.net

iframe server error

  Privacy | Contact Us
All Times Are GMT