Hey all sorry if this has been asked before. I did Google and didn't come up
with a result.
I want to know if I can decrypt passwords stored as MD5 in a SQL Server
database using the Decrypt function? There are online tools out there that
decrypt MD5 so I'm hoping that I can do this in CF.
When you say it doesn¹t generate any errors, do you mean that you¹ve
looked through the exception logs? Unless you are trapping it with
try/catch or a custom error handler, that¹s the only place you would
discover that an error happened in a cfthread that you are spawning and
forgetting.
On
This is googleable uhmmm.. thanks Captain Obvious, here's your cape :P
From what I was able to dig up ColdFusion 9 is a no go with Java 8. There
are hotfixes available for 10 and 11... of course there's always
Railo/Lucee ..
On Thu, Mar 12, 2015 at 10:16 AM, Eric Roberts
Unless I missed it, Adobe has not certified ColdFusion 9.0.x on Java 8.
Remember this as I continue
Also, Adobe ColdFusion 9.x.x reached End Of Life back on December 31st, 2014.
http://www.trunkful.com/index.cfm/2014/11/24/ColdFusion-9-Reaches-End-Of-Life-Long-Live-ColdFusion
This is googleable...i was just looking for a similar solution with
10...you ar going to have to move several files from the sdk jre
directory...one is tools.jar and msvcr1000.dll (I think)...you also have to
change the java home setting in cfadmin to the jre directory in the sdk as
well.
Hashes have other uses as well. I pull data from a source database that has
over 3 gigs of data in it and every hour the owners of that database flag all
the rows as updated even if they weren't. I need to pick up just the changed
rows, so I pull down the primary key and a hash of all of the
Just for reference. Here's a pretty good article on how to hash properly.
https://crackstation.net/hashing-security.htm
Hashing is often done incorrectly, even if it's being salted you never want
to use the same salt across the board. Simple thing is, compute power is so
available, brute
Yeah checking hashed values of software is used to confirm changes or lack
there of.
I use a piece of a hashed value in encrypted url qury strings to make sure
the value wasn't changed between requests.
Hash has a ton of uses.
On Mar 12, 2015 9:15 AM, DURETTE, STEVEN J sd1...@att.com wrote:
no it certainly is not useless.
The whole point in hashing a value is so that it cannot be decrypted,
typically this is used for passwords.
Imagine a hacker gets into your web app, which is extremely common, then
all your encrypted data is useless, because he has access to your code and
can
So is this still a Windows 2003 server too? :D
Wil Genovese
Sr. Web Application Developer/
Systems Administrator
CF Webtools
www.cfwebtools.com
wilg...@trunkful.com
www.trunkful.com
On Mar 12, 2015, at 9:59 AM, Scott Stewart webmas...@sstwebworks.com wrote:
Wil, that's what I'm pushing
Brute forcing MD5 hashes is really only going to work if you are still
using weak passwords to begin with and just hashing them. This then works
in exactly the same way as a brute force dictionary attack on a plain
password, except they try the hashed version of the same password.
You should
Wil, that's what I'm pushing for. The powers that be having been dragging
their feet on upgrading. This may be just the thing to push them over.
On Thu, Mar 12, 2015 at 10:48 AM, Wil Genovese jugg...@trunkful.com wrote:
Unless I missed it, Adobe has not certified ColdFusion 9.0.x on Java 8.
No, they seem to keep up with Microsoft releases :)
On Thu, Mar 12, 2015 at 11:01 AM, Wil Genovese jugg...@trunkful.com wrote:
So is this still a Windows 2003 server too? :D
Wil Genovese
Sr. Web Application Developer/
Systems Administrator
CF Webtools
www.cfwebtools.com
It's a COTS app (CommonSpot) They've already produced a code base that will
support 11.
On Thu, Mar 12, 2015 at 12:12 PM, Dan G. Switzer, II
dswit...@pengoworks.com wrote:
You may find the jump from CF9 to CF10/11 to require changes to your app. I
know the change for us was not
Steven,
What is it that is telling you that the thread is not running? What is it
supposed to do that it is not, manipulate the file system, execute a stored
procedure? Is it supposed to return a value that you are not seeing? Remember
that a function that initiates a thread will continue
You may find the jump from CF9 to CF10/11 to require changes to your app. I
know the change for us was not straightforward. Make sure you plan for an
extensive QA cycle after upgrading. One of the biggest issues we ran into
was with date/time conversions. We store everything in UTC. Adobe changed
I want to know if I can decrypt passwords stored as MD5 in a SQL Server
database using the Decrypt
function? There are online tools out there that decrypt MD5 so I'm hoping
that I can do this in CF.
There are no tools that actually decrypt MD5 hashes, to the best of my
knowledge. MD5 is a
It looks like you can if you know the salt:
http://www.hashkiller.co.uk/md5-decrypter.aspx
http://www.md5online.org/
http://md5decryption.com/
http://www.md5decrypter.com/
Robert Harrison
Full Stack Developer
AIMG
rharri...@aimg.com
Main Office: 704-321-1234 ext.118
Direct Line:
So basically MD5 is useless if you can't decrypt the value! That sucks.
Kind regards,
Rick
-Original Message-
From: Dave Watts [mailto:dwa...@figleaf.com]
Sent: Thursday, March 12, 2015 9:57 AM
To: cf-talk
Subject: Re: Decrypting MD5
I want to know if I can decrypt passwords
So basically MD5 is useless if you can't decrypt the value! That sucks.
Maybe, if you're storing data you need to retrieve. Generally I use if for
data I need to compare (like passwords), then I just encrypt the values the
same way and compare the encrypted values.
Robert Harrison
Full Stack
Oracle is EOL'ing Java 7 in February. The agency that I work for is going
to require upgrades to Java 8.
Does anyone know definitively whether or not ColdFusion 9 will work on Java
8. We are in deep poop if it doesn't.
Thanks
sas
--
--
Scott Stewart
Adobe Certified Instructor, ColdFusion 8
So basically MD5 is useless if you can't decrypt the value! That sucks.
I don't know about useless. Hashing is not the same as encryption.
They're intended to solve different problems.
Let's say you're using a Windows network, with Active Directory.
Active Directory doesn't actually know your
Also, don't forget that with Java 8 you will not have access to any ODBC
datasources as they have removed the JDBC-ODBC bridge in Java 1.8.
This is a non-issue for most, but for company's like ours that provide
middleware for legacy applications using older dBase, FoxPro, etc. back ends,
23 matches
Mail list logo
