Does anyone know how Project Euler was storing the passwords?
Project Euler Humble Return
11–20 of 127 posts
Re: Project Euler Humble Return
#12Does anyone know how Project Euler was storing the passwords?
Usernames cannot contain more than 32 characters
and they may only contain upper/lower case
alphanumeric characters (A-Z, a-z, 0-9), dot (.),
hyphen (-), and underscore (_).
Passwords must contain between 8 and 32 characters.
Re: Project Euler Humble Return
#13Does anyone know how Project Euler was storing the passwords?
Usernames cannot contain more than 32 characters and they may only contain upper/lower case alphanumeric characters (A-Z, a-z, 0-9), dot (.), hyphen (-), and underscore (_). Passwords must contain between 8 and 32 characters. My money is on "ineptly."
It used to be a salted MD5 hash, but it may have changed.
Re: Project Euler Humble Return
#14Why is project euler not on github? Yeah..no one's gonna help unless you open-source your project buddy.
That's not nice. It's also plainly false. Lots of people love Project Euler.
Re: Project Euler Humble Return
#15Does anyone know how Project Euler was storing the passwords?
Usernames cannot contain more than 32 characters and they may only contain upper/lower case alphanumeric characters (A-Z, a-z, 0-9), dot (.), hyphen (-), and underscore (_). Passwords must contain between 8 and 32 characters. My money is on "ineptly."
There's really not much rational for capping passwords at anything beneath 256 characters.
256 characters makes for a fairly sizable passphrase, and doesn't represent a substantial hit on storage space. In reality, even if they were stored as encrypted binary/base64 in a nosql file system of structured data files, 4096 is pretty much the de-facto floor for disk space occupied by non-zero-byte individual files on most modern file systems.
...variable data size being a concern in cases where the transformed value is encrypted rather than hashed.
Re: Project Euler Humble Return
#16It's a shame the maintainer of the site is going to let it fall into obscurity instead of just adopting more modern development practices. edit. Such as allowing people to audit the source of the site as opposed to requesting pentesting.
Please don't post backhanded swipes like this, or outright insults like "This guy is a moron." [1] The idea on HN is to comment civilly and substantively [2], or not at all.
Re: Project Euler Humble Return
#17Despite the whole situation being rather embarrassing, it seems like they're handling this quite well. Whitehat to the rescue!
Re: Project Euler Humble Return
#18The ultimate project euler challenge!
Re: Project Euler Humble Return
#19Earlier quoted context omitted.
Usernames cannot contain more than 32 characters and they may only contain upper/lower case alphanumeric characters (A-Z, a-z, 0-9), dot (.), hyphen (-), and underscore (_). Passwords must contain between 8 and 32 characters. My money is on "ineptly."
There's really not much rational for capping passwords at anything beneath 256 characters. 256 characters makes for a fairly sizable passphrase, and doesn't represent a substantial hit on storage space. In reality, even if they were stored as encrypted binary/base64 in a nosql file system of structured data files, 4096 is pretty much the de-facto floor for disk space occupied by non-zero-byte individual files on most…
> 256 characters makes for a fairly sizable passphrase, and doesn't represent a substantial hit on storage space.
They shouldn't be storing passwords at all so storage space should be a non-issue. My 20 meg password should hash down to the same small(er) value as your 15 character one.
Re: Project Euler Humble Return
#20I don't get it why someone would hack project euler.