[OT] Fertile Crescent? This lady says Garden of Eden is in Oz.

2011-12-21 Thread Pete Theisen
Hi Everybody, http://away.com/hiking-guide/travel-ta-trekking-backpacking-cultural-immersion-australia-nature-hiking-sidwcmdev_050517.html Australia’s Northern Territory is not for the faint of heart, and Kakadu National Park is about as wild and relentless as the country’s Red Center gets.

[OT] Beard cutting attack

2011-12-21 Thread Pete Theisen
Hi Everybody, http://www.msnbc.msn.com/id/45743921/ns/us_news-crime_and_courts/ Somehow . . . -- Regards, Pete http://pete-theisen.com/ http://elect-pete-theisen.com/ ___ Post Messages to: ProFox@leafe.com Subscription Maintenance:

Re: Alternatives to storing a user's password in your database

2011-12-21 Thread Alan Bourke
On Tue, Dec 20, 2011, at 04:16 PM, Ed Leafe wrote: On Dec 20, 2011, at 4:02 PM, MB Software Solutions, LLC wrote: You should never store passwords. Instead, you should store a hash of the password. When the user logs in, you hash the supplied password and compare it to the stored

Re: Alternatives to storing a user's password in your database

2011-12-21 Thread Man-wai Chang
There was/is an old trick called irreversible encryption. It's used by Unix/Linux, I believe. On Wed, Dec 21, 2011 at 6:02 AM, MB Software Solutions, LLC mbsoftwaresoluti...@mbsoftwaresolutions.com wrote: As you might have seen from a previous thread, I was looking at using the checksum via

Re: Alternatives to storing a user's password in your database

2011-12-21 Thread Allen
Hi John Its too late for my main product but for future use I would like to see the code please. I use two fields currently, one with the length in. Al -Original Message- I have a routine which pads the password to a fixed length of, say, 20 characters with a standard string of

Re: Alternatives to storing a user's password in your database

2011-12-21 Thread Ed Leafe
On Dec 21, 2011, at 5:54 AM, Man-wai Chang wrote: There was/is an old trick called irreversible encryption. It's used by Unix/Linux, I believe. That's what hashing is: a one-way process that produces a value that cannot be used to re-create the original. -- Ed Leafe

Re: Alternatives to storing a user's password in your database

2011-12-21 Thread Ed Leafe
On Dec 20, 2011, at 9:04 PM, MB Software Solutions, LLC wrote: Craig's site lists these options for the HASH: 1 = SHA1 (a.k.a SHA160) 2 = SHA256 3 = SHA384 4 = SHA512 *Default 5 = MD5 6 = RIPEMD128 7 = RIPEMD160 So your SHA-2 is most likely like #4, SHA512? So I store the 128 byte

Re: [OT] Fleggaard ad

2011-12-21 Thread Nicholas Geti
The ones near the camera have been surgically enhanced. - Original Message - From: Pete Theisen petethei...@verizon.net To: ProFox Email List profox@leafe.com Sent: Tuesday, December 20, 2011 5:59 PM Subject: [OT] Fleggaard ad ** ** Hi Everybody, NSFW Advert for Siemens

[NF] Thoughts on safety for businesses

2011-12-21 Thread Stephen Russell
http://arstechnica.com/news/2011/12/how-hackers-gave-subway-a-30-million-lesson-in-point-of-sale-security.ars -- Stephen Russell 901.246-0159 cell ___ Post Messages to: ProFox@leafe.com Subscription Maintenance:

Re: Fun with LabelRIGHT...

2011-12-21 Thread Kurt @ VR-FX
U got THAT Right! :-) I don't feel SO bad about my mistake - since, its funny when I see others do the same thing. Post a question for help - then respond back to say that they figured it out - or admitted to making a mistake - that caused the problem. Thanks anyway! -K- On 12/21/2011 2:14

Re: Fun with LabelRIGHT...

2011-12-21 Thread Michael Madigan
Kind of like yelling, :Where's the ketchup?, a microsecond before finding it behind the milk. From: Kurt @ VR-FX v...@optonline.net To: profox@leafe.com Sent: Wednesday, December 21, 2011 1:56 PM Subject: Re: Fun with LabelRIGHT... U got THAT Right! :-) I

Craig Boyd's CRC using the 32-bit option

2011-12-21 Thread MB Software Solutions, LLC
Craig's CRC function has a 2nd parameter for 16-bit or 32-bit. From his help page: --- The CRC that is returned is unsigned, which means that the returned 16-bit CRC needs to be treated as a 4 Byte numeric value and the 32-bit CRC as a 8 byte numeric value in

Re: Craig Boyd's CRC using the 32-bit option

2011-12-21 Thread Ed Leafe
On Dec 21, 2011, at 3:09 PM, MB Software Solutions, LLC wrote: However, when I run some tests, the resulting number is a 10-digit numeric. Perhaps I'm mixing units here, but isn't that beyond 8-byte? I mean, I've dealt with packed decimals years ago in Assembler, but when he says 8-byte

Re: Craig Boyd's CRC using the 32-bit option

2011-12-21 Thread Fred Taylor
Ed, You showed the largest 4 byte number. Each FF is a single byte, Fred On Wed, Dec 21, 2011 at 2:21 PM, Ed Leafe e...@leafe.com wrote: On Dec 21, 2011, at 3:09 PM, MB Software Solutions, LLC wrote: However, when I run some tests, the resulting number is a 10-digit numeric. Perhaps

Re: Craig Boyd's CRC using the 32-bit option

2011-12-21 Thread Ed Leafe
On Dec 21, 2011, at 3:24 PM, Fred Taylor wrote: You showed the largest 4 byte number. Each FF is a single byte, My bad - guess I mis-read that. Then why would a max value of 18446744073709551615 show up in Fox as 10 digits? -- Ed Leafe

Re: Craig Boyd's CRC using the 32-bit option

2011-12-21 Thread Fred Taylor
On Wed, Dec 21, 2011 at 2:33 PM, Ed Leafe e...@leafe.com wrote: On Dec 21, 2011, at 3:24 PM, Fred Taylor wrote: You showed the largest 4 byte number. Each FF is a single byte, My bad - guess I mis-read that. Then why would a max value of 18446744073709551615 show up in Fox

Re: Craig Boyd's CRC using the 32-bit option

2011-12-21 Thread MB Software Solutions, LLC
On 12/21/2011 4:21 PM, Ed Leafe wrote: On Dec 21, 2011, at 3:09 PM, MB Software Solutions, LLC wrote: However, when I run some tests, the resulting number is a 10-digit numeric. Perhaps I'm mixing units here, but isn't that beyond 8-byte? I mean, I've dealt with packed decimals years ago in

Re: Craig Boyd's CRC using the 32-bit option

2011-12-21 Thread Fred Taylor
If it's truly a 10 digit number, it may just be an unsigned 4 byte integer. As long as the value doesn't exceed 4,294,967,295 that's all it is. However, VFP stores signed integers, so yes, you would have to store it as a N(10). Fred On Wed, Dec 21, 2011 at 2:43 PM, MB Software Solutions, LLC

Re: Craig Boyd's CRC using the 32-bit option

2011-12-21 Thread Fred Taylor
You could also store it as a float (f) or double (b) CREATE CURSOR xyz (bignum f) CREATE CURSOR xyz (bignum b) CREATE CURSOR xyz (bignum n(10)) Fred On Wed, Dec 21, 2011 at 2:43 PM, MB Software Solutions, LLC mbsoftwaresoluti...@mbsoftwaresolutions.com wrote: On 12/21/2011 4:21 PM, Ed

RE: foreward from Les Pinter's upcoming book

2011-12-21 Thread Rick Schummer
I really enjoyed reading it. You might too. Interesting read, but I emailed Les about a fact problem. He mentioned Charles Simonyi was a space tourist who launched to the Mir space station. Charles actually visited the International Space Station twice, not Mir. Mir was deorbited 6 years

Get a heads upon the new OS Win8

2011-12-21 Thread Stephen Russell
Get a heads up on what is coming out next. Sure there is a fee. http://app.tech.pentontech.com/e/es.aspx?s=1481e=104720elq=f9c19e81a84b4687998b1ac20dbc83a2 New features abound: a brand new user interface with an entirely new application model, support for a new architecture that enables Windows

Re: Alternatives to storing a user's password in your database

2011-12-21 Thread Gérard Lochon
I defy anyone to recover the password from the stored value :-). There is a big risk of collision using your method. As the result set is composed of only 65128 different values, it doesn't take a long time to input in the routine a string whose result will be the same value as the stored one

Re: foreward from Les Pinter's upcoming book

2011-12-21 Thread MB Software Solutions, LLC
On 12/21/2011 5:07 PM, Rick Schummer wrote: I really enjoyed reading it. You might too. Interesting read, but I emailed Les about a fact problem. He mentioned Charles Simonyi was a space tourist who launched to the Mir space station. Charles actually visited the International Space

RE: foreward from Les Pinter's upcoming book

2011-12-21 Thread Jarvis, Matthew
Good catch. So where'd he go? Just up in the atmosphere or to the International space station? The ISS... He even has his own website devoted to all that fun: http://www.charlesinspace.com/ Thanks, Matthew Jarvis || Business Systems Analyst IT Department McKenzie-Willamette Medical

Re: Alternatives to storing a user's password in your database

2011-12-21 Thread MB Software Solutions, LLC
On 12/21/2011 5:15 PM, Gérard Lochon wrote: I defy anyone to recover the password from the stored value :-). There is a big risk of collision using your method. As the result set is composed of only 65128 different values, it doesn't take a long time to input in the routine a string whose

Re: Alternatives to storing a user's password in your database

2011-12-21 Thread Fred Taylor
On Wed, Dec 21, 2011 at 3:33 PM, MB Software Solutions, LLC mbsoftwaresoluti...@mbsoftwaresolutions.com wrote: On 12/21/2011 5:15 PM, Gérard Lochon wrote: I defy anyone to recover the password from the stored value :-). There is a big risk of collision using your method. As the

Re: Alternatives to storing a user's password in your database

2011-12-21 Thread Gérard Lochon
From: MB Software Solutions I defy anyone to recover the password from the stored value :-). There is a big risk of collision using your method. As the result set is composed of only 65128 different values, it doesn't take a long time to input in the routine a string whose result will be

RE: Alternatives to storing a user's password in your database

2011-12-21 Thread John Weller
Could you explain why there can only be 65128 different values? I still maintain that it would be extremely difficult to recover the password from the stored numerical value :-) John Weller 01380 723235 07976 393631 -Original Message- From: profoxtech-boun...@leafe.com

Re: Alternatives to storing a user's password in your database

2011-12-21 Thread MB Software Solutions, LLC
On 12/21/2011 6:00 PM, Fred Taylor wrote: http://en.wikipedia.org/wiki/Collision_(computer_science) Thanks, Fred. -- Mike Babcock, MCP MB Software Solutions, LLC President, Chief Software Architect http://mbsoftwaresolutions.com http://fabmate.com http://twitter.com/mbabcock16

Re: Alternatives to storing a user's password in your database

2011-12-21 Thread MB Software Solutions, LLC
On 12/21/2011 6:10 PM, John Weller wrote: Could you explain why there can only be 65128 different values? I still maintain that it would be extremely difficult to recover the password from the stored numerical value :-) He's not saying they could guess it; he's saying that my password and

Re: Alternatives to storing a user's password in your database

2011-12-21 Thread Ed Leafe
On Dec 21, 2011, at 5:10 PM, John Weller wrote: Could you explain why there can only be 65128 different values? I still maintain that it would be extremely difficult to recover the password from the stored numerical value :-) That's a different issue than collision. With collision,

RE: Alternatives to storing a user's password in your database

2011-12-21 Thread Grigore Dolghin
I wonder when people will learn that there are guys whose only job is to think on these things. And the outcome cannot be beaten by in-house solutions no matter what, first because they do that 8 hours a day, 5 days a week. An inhouse solution simply cannot compete. Not to mention that usually the

Re: Alternatives to storing a user's password in your database

2011-12-21 Thread Gérard Lochon
- Original Message - From: John Weller j...@johnweller.co.uk Could you explain why there can only be 65128 different values? At the first turn , you have 256 seeding possibilities. You randomize. Then you multiply this value (between 0 and 1) by an ascii code (between 0 and 255),

RE: Alternatives to storing a user's password in your database

2011-12-21 Thread Grigore Dolghin
Since I wrote my last message (1h 10 minutes ago) I wrote a quick'n'dirty program that looks for alternate strings. Guess what, it finds the string as fast as even by SET DECIMALS TO 18 I couldn't measure the execution time. I used my name as a password and padded it with ABCDE up to 20 chars

RE: foreward from Les Pinter's upcoming book

2011-12-21 Thread Rick Schummer
The ISS... Yes, exactly as I mentioned in my original post. gdr fMB BTW, Les appreciated the correction. Rick White Light Computing, Inc. www.whitelightcomputing.com www.swfox.net www.rickschummer.com ___ Post Messages to: ProFox@leafe.com

Re: foreward from Les Pinter's upcoming book

2011-12-21 Thread Michael Oke, II
No reason to think that he wouldn't. Unless he said it for other reasons. Michael Oke, II 661-349-6221 Contents of this and all messages are intended for their designated recipient. On Dec 21, 2011, at 5:20 PM, Rick Schummer pro...@whitelightcomputing.com wrote: The ISS... Yes, exactly

Does anybody know how to programatically read thunderbird inbox files

2011-12-21 Thread Michael Savage
I've seen code samples for gmail, outlook, outlook express, etc, but nothing for thunderbird. Any ideas, how I would do it? Mike ___ Post Messages to: ProFox@leafe.com Subscription Maintenance: http://leafe.com/mailman/listinfo/profox OT-free version

Re: Alternatives to storing a user's password in your database

2011-12-21 Thread MB Software Solutions, LLC
On 12/21/2011 6:12 PM, Ed Leafe wrote: That's a different issue than collision. With collision, you don't need to know the original password; instead, you have a one in N chance of a random string matching the password, where N is the total number of possible values. So I could write

Re: [OT] Fleggaard ad

2011-12-21 Thread Pete Theisen
Nicholas Geti wrote: The ones near the camera have been surgically enhanced. Hi Nicholas, How can you tell? NSFW Advert for Siemens dishwasher .. Across Germany ’s northern border with Denmark you'll find an incredible superstore called Fleggaard. There, you can buy everything you

Re: [OT] Fleggaard ad

2011-12-21 Thread Nicholas Geti
I am an expert. Notice when they first sat down and removed their tops.how the top of each bulges up like a blown up balloon. They don't jiggle and on the trip down I only saw one pair that was pulled down by gravity. The others remained looking like stretched balloons and didn't show any wind

Re: [OT] Fleggaard ad

2011-12-21 Thread Pete Theisen
Nicholas Geti wrote: I am an expert. Notice when they first sat down and removed their tops.how the top of each bulges up like a blown up balloon. They don't jiggle and on the trip down I only saw one pair that was pulled down by gravity. The others remained looking like stretched balloons

Re: [OT] Fleggaard ad

2011-12-21 Thread Ken Kixmoeller (ProFox)
On Wed, Dec 21, 2011 at 9:51 AM, Nicholas Geti ng...@optonline.net wrote: It was obviously geared strictly to men. The ad is real. Here is a link to simply the best advertisement ever made. http://www.m2film.dk/fleggaard/trailer2.swf Geez! ... and a Merry Christmas one and all! Ken

RE: Alternatives to storing a user's password in your database

2011-12-21 Thread John Weller
Well that opened my eyes, thanks guys! I wrote a quick and dirty test along the lines of those suggested before I read any of the responses after Gerard's initial one and was appalled at the results :-). What I thought was reasonably secure is most definitely not! I also realised that my

RE: Alternatives to storing a user's password in your database

2011-12-21 Thread John Weller
Thanks Gerard, I should have thought it through a bit better :-) John Weller 01380 723235 07976 393631 -Original Message- From: profoxtech-boun...@leafe.com [mailto:profoxtech-boun...@leafe.com] On Behalf Of Gérard Lochon Sent: 21 December 2011 23:58 To: profoxt...@leafe.com

Re: Alternatives to storing a user's password in your database

2011-12-21 Thread MB Software Solutions, LLC
On 12/21/2011 7:32 PM, Grigore Dolghin wrote: Since I wrote my last message (1h 10 minutes ago) I wrote a quick'n'dirty program that looks for alternate strings. Guess what, it finds the string as fast as even by SET DECIMALS TO 18 I couldn't measure the execution time. I used my name as a