[TYPO3-core] RFC #14307: fe_user passwords are visible in the info popup window in the backend

Felix Oertel mehl at foertel.com
Wed May 5 23:55:26 CEST 2010


Am 05.05.10 20:55, schrieb Lars Houmark:
>> * if i was a bad admin and I would saw random number of asterisks my
>> bruteforce went 6, 7, 5, 8, 9, 10, ... digits anyway
> Good luck, did you calculate the time added for doing that? ;)

does the time I need to hack the password increase with a random number 
of asterisks?

anyway, it's committed so I guess discussion ends here ;)

regards, foertel


More information about the TYPO3-team-core mailing list