Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Python 

Python "Secure Login" system [SHA 256]

(Feb 8, 2013 06:34 PM)PigBacon Wrote:  I know they're the same, I just mean if what I type is going to be in my term until I close it, or someone could do the whole look-over-the-shoulder or I could accidentally broadcast it or something.
Even your sudo password can be spied on, but I'd still prefer to not have my password written for everyone to see by scrolling up.

Yeah true. In this case he made the pass with getpass just the username is raw input. But anyway I see what you're saying.
(Feb 8, 2013 06:35 PM)Djаngo Wrote:  Yeah true. In this case he made the pass with getpass just the username is raw input. But anyway I see what you're saying.

The password was raw_input('Password: ') when I posted originally, he may well have changed it after a few people mentioned it.
(Feb 8, 2013 06:50 PM)PigBacon Wrote:  The password was raw_input('Password: ') when I posted originally, he may well have changed it after a few people mentioned it.

Yeah I did, considering how much the guys suggested.
Why would anyone ever need this? I am not sure why anyone would need a local login system in Python.
(Feb 10, 2013 04:04 PM)nikentic Wrote:  Why would anyone ever need this? I am not sure why anyone would need a local login system in Python.

For learning purposes like the same thing if somebody makes a calculator..
(Feb 10, 2013 04:15 PM)Djаngo Wrote:  For learning purposes like the same thing if somebody makes a calculator..

But it's not a secure login system. Neither does it accomplish anything. I am not saying it's useless, but this code isn't gonna teach anyone anything.
(Feb 10, 2013 04:18 PM)nikentic Wrote:  But it's not a secure login system. Neither does it accomplish anything. I am not saying it's useless, but this code isn't gonna teach anyone anything.

Please do tell me how to decrypt a SHA 256 hash. Just to prove your point that it is not secure.
(Feb 12, 2013 01:40 AM)ノクス。 Wrote:  Please do tell me how to decrypt a SHA 256 hash. Just to prove your point that it is not secure.

I did not mean that the encryption itself isn't save. Just that the implementation of it isn't safe. It's stored locally in your RAM and there is no salt at all. These 2 are obvious security flaws and should be corrected.
(Feb 12, 2013 07:07 AM)nikentic Wrote:  I did not mean that the encryption itself isn't save. Just that the implementation of it isn't safe. It's stored locally in your RAM and there is no salt at all. These 2 are obvious security flaws and should be corrected.

He didn't implement getpass until a few of us brought it up, he just said we should do it ourselves.
So don't even bother. 🤫


Possibly Related Threads...
Thread / Author Replies Views Last Post
by pwd000Jan 29, 2024 12:13 AM 2 141 Jan 29, 2024 12:13 AM
Last Post: Jacked
[Python] by Bass_ReevesAug 20, 2023 01:44 AM 9 632 Aug 20, 2023 01:44 AM
Last Post: Lucky4L
[C] by neonbytesJan 8, 2021 04:09 PM 10 354 Jan 8, 2021 04:09 PM
Last Post: poker