Re: [flexcoders] Re: Local storage of password

2007-12-06 Thread Tom Chiverton
On Wednesday 05 Dec 2007, rmarples wrote: > SharedObject because it's not sensitive, but for the password the > salesforce.com security requirements are such that you can only store local > passwords if you encrypt them SharedObject is encrypted, to all intents and purposes. > requirement just i

Re: [flexcoders] Re: Local storage of password

2007-12-05 Thread Paul Andrews
- Original Message - From: "rmarples" <[EMAIL PROTECTED]> To: Sent: Wednesday, December 05, 2007 11:30 PM Subject: [flexcoders] Re: Local storage of password > Well the thing about this application is, I don't own the server. I'm > using a 3rd party > Internet web service (salesforce.c

Re: [flexcoders] Re: Local storage of password

2007-12-05 Thread Paul Andrews
]> To: Sent: Wednesday, December 05, 2007 4:40 PM Subject: Re: [flexcoders] Re: Local storage of password > > I think that's a simple (yet elegant) solution. > I wish I thought of it. > > Paul Andrews wrote: >> - Original Message - >> From: "Jeffry H

Re: [flexcoders] Re: Local storage of password

2007-12-05 Thread Jeffry Houser
I think that's a simple (yet elegant) solution. I wish I thought of it. Paul Andrews wrote: > - Original Message - > From: "Jeffry Houser" <[EMAIL PROTECTED]> > To: > Sent: Wednesday, December 05, 2007 2:22 PM > Subject: Re: [flexc

RE: [flexcoders] Re: Local storage of password

2007-12-05 Thread Tom Chiverton
> That'd be too easy. He stated that he needs to prevent the user from > re-entering the password upon their next use of the application. So compare hashes again... ? Tom Please note, as of 10th December 2007 the registered office address

Re: [flexcoders] Re: Local storage of password

2007-12-05 Thread Paul Andrews
- Original Message - From: "Jeffry Houser" <[EMAIL PROTECTED]> To: Sent: Wednesday, December 05, 2007 2:22 PM Subject: Re: [flexcoders] Re: Local storage of password > > That'd be too easy. He stated that he needs to prevent the user from > re-enterin

Re: [flexcoders] Re: Local storage of password

2007-12-05 Thread Jeffry Houser
That'd be too easy. He stated that he needs to prevent the user from re-entering the password upon their next use of the application. Tom Chiverton wrote: > On Tuesday 04 Dec 2007, rmarples wrote: >> requirement that I can't store the encryption key in the source code as a >> string literal.

RE: [flexcoders] Re: Local storage of password

2007-12-05 Thread Aaron Hergenreder
You could store an access key (hashed, encrypted, etc) that you use to lookup the data's encryption key from a database or off the server and have the server end handle the security. _ From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of rmarples Sent: Tuesday, Decemb

Re: [flexcoders] Re: Local storage of password

2007-12-05 Thread Tom Chiverton
On Tuesday 04 Dec 2007, rmarples wrote: > requirement that I can't store the encryption key in the source code as a > string literal. I'm wondering if you or anybody else has ideas on how to > handle this? Sorry to jump in mid-thread, but if you just need to check a password is the same as one en

Re: [flexcoders] Re: Local storage of password

2007-12-04 Thread Michael Wills
Is this a Flex app on a web page? I am not sure about an AIR project but with Flex and webservices, you still have the benefit of cookies and sessions. I am working a project that uses a standard web page login that gets the user logged in and the session started. After that it moves to the Fle

Re: [flexcoders] Re: Local storage of password

2007-12-04 Thread Jeffry Houser
Yes, MD5 is a hashing algorithm and it is unlikely you'd be able to take a hash and get the original text (in a timely / efficient manner). There are a few AS3 encryption projects. ASCrypt3: ascrypt3.riaforge.com and Crypto http://crypto.hurlant.com/ Both of them have 2-way encryption a