Oh, cool, someone revived the thread so now I can reply to this without trawling through old stuff to find it
Quote:
Originally posted by AlkarenHyralt
Sorry don't feel like going and finding your post again Kai.
I couldn't get passwords in the way you think; you can no physically see the passwords, unless you have access to the vBulletin MySQL tables, and someone has found a way to decrypt md5, which is how all passwords are stored. When stefan said that I could get people's passwords, he meant I could enter in my e-mail address for someone and then use the lost password thing...except there is one thing I just remembered, and I need to hit myself for not remembering before: the retrieve lost password feature doesn't work on these forums, because neither Stefan nor unixmad set up the information for it to work. So actually, there is no possible way for me to get people's passwords, short of them telling it to me, and besides it would only be the forum passwords even if I could, and not their actual Graal password.
|
If the only thing holding you back is simply a bug in the system then it's still bad security. And besides, even if you could only get forum passwords, some people use the same password for everything on the net.