GCHQ - A plaintext offender
- Thread starter dfarrall
- Start date
Caporegime
- Joined
- 11 Mar 2005
- Posts
- 32,253
- Location
- Leafy Cheshire
That's got nothing to do with the security of GCHQ like you originally stated.
It's certainly has to do with the security of personal details to the agents that have applied, or are applying.
Clearly this is way over some of GD's heads.
Please lock if a mod see's and i'll keep to places that can comprehend it
So come on then, what's the potential security threat and implications of your account password being exposed.
Could they be used to compile a list of potentially successful applicants?
That's got nothing to do with the security of GCHQ like you originally stated.
Clearly this is way over some of GD's heads.
Please lock if a mod see's and i'll keep to places that can comprehend it
What?
So when you said 'GCHQ - not so secure?', It had nothing to do with the security of GCHQ?
You're right, that just went straight over my head.
Stored in that database are names, family members names, passport numbers, addresses and other personal information on GCHQ Employees and applicants.
Your telling me that information isn't worth being protected?
Well bugger me then what is..
Your telling me that information isn't worth being protected?
Well bugger me then what is..
Ok, aside from the fact you illegitmately tried to link this with the overall security of GCHQ and are now backtracking,
Are you under the impression that because it was sent to you in plain text, it must also have been stored on the database in plain text?
And?
Is that information viewable when logged in or is it on submit only data?
You are making a huge thing about something that is potentially nothing.
It goes hand in hand with the security of GCHQ, not with their operations though.
They're stored in a reversible algorithm at least. This is exactly why you shouldn't trash articles when you clearly have no clue about the principles behind it.
Caporegime
- Joined
- 11 Mar 2005
- Posts
- 32,253
- Location
- Leafy Cheshire
If this was purely for job application purposes im surprised they ask for this level of detail at an early stage, I know it's not true for other branches of security in the country.
Clearly you didn't read the article before you dived in head first flaming then..
Last edited:
Erm, it wouldn't be much use to anyone if it wasn't reversible would it?
??
The best way to store passwords is to store just a salted hash of them. There should be no way to retrieve the actual password.
There is also no need to send a user their password, if they forget it, reset it.
Bravo! Again trolling on a subject you know nothing about, clearly.
Proper password hashing should be done to the point it's not feasible to reverse them.
Take a look at Bcrypt and Scrypt.
Discussion can be found here; https://news.ycombinator.com/item?id=5442238
Right.
I fail to see how asking a question resembles trolling.
