> -----Original Message----- > From: Mark Stanton [mailto:[EMAIL PROTECTED] > Sent: Monday, February 24, 2003 3:32 PM > To: CFAussie Mailing List > Subject: [cfaussie] RE: Dictionary attacks > > Another very easy but not so secure option is > listfirst(createUUID,'-'). > Still much better than a dictionary word.
Be careful making this kind of assumption. ColdFusion makes UUIDs differently depending on what operating systems its running on. I'm not sure what happens on CFMX, but I used to make a lot of UUID in both Win2000 and Solaris. There always was a section of characters in each UUID, in any group of UUID produced on the same machine on the same day, that did not change. The trick was that this unchanging part was in a different place depending on the OS. I think I recall that on Solaris the first section of the UUID was always the same, while I think the end of the Windows UUIDs were the same. (I may have this around the wrong way) In any case, your code above will, on some OSs, give everyone the same password on any given day, and even then, tomorrows won't be significantly different either. Darren Tracey --- You are currently subscribed to cfaussie as: [EMAIL PROTECTED] To unsubscribe send a blank email to [EMAIL PROTECTED] MX Downunder AsiaPac DevCon - http://mxdu.com/
