Why does the new BuildOS need a username containing at least 5 letters?

[boyo]

I was just having the same problem, for about the past 10 mins or so, I have been unable to login to the kitchen.. What is the purpose of logging in?

[gguruusa]

Originally Posted by civicsi89

My login was working and now its not. So do I just make up a new one?

No, sorry, it's fixed.

[gguruusa]

Originally Posted by boyo

What is the purpose of logging in?

No purpose. Feel free to not log in.

[jnjn]

is the password encrypted during transmission and server side storage?
i think most people will simply try their forum ids and passwords. if the passwords are in clear texts.... that's a big vulnerability.

[gguruusa]

Not really, because the system isn't secure anyway...you can access it by just making a new username and password, no need to steal one. That just leaves access to other username/password combinations, and that is protected.

The original releases only had 2 known weknesses, but the most recent release introduced a 3rd. 2 of the 3 weaknesses will be addressed w/ the next release. The 3rd weakness will either be fixed in the next release, or the one following.

[gregpilot]

Originally Posted by gguruusa

you can access it by just making a new username and password, no need to steal one. That just leaves access to other username/password combinations, and that is protected.

Hmmm? I understand you can make up a new username/pass, but what is "leaves access to other username/password combinations.....?????'

Or maybe you are planning a db of "authorized" users at a future time?

[gguruusa]

In the context of vulnerabilities, there are several types. Two of the most common are access to the host sytems by unauthorized users (which, by definition all users are allowed access, so this doesn't apply), and access on the host system to another user's data (in the context of the prior question/statement, this would be other username/password combinations)

There already are different levels of "authorization". Specifially, users are currently divided into "general user" and "special". Special is primarily devs. General User is divided into 2 sub categories, those who have donated, and everyone else. Donaters generally have the nag screen removed, some additional functionality, and access to advance releases of major BuildOS versions.

[tedoanh]

When trying to login with a user name thats more then 5 charectors and password I get the following error:

Internal Error.
[DBNETLIB][ConnectionOpen (Connect().]SQL Server does not exist or access denied.

The remote server returned an error: (407) Proxy Authentication Required.

[MadManX]

Originally Posted by tedoanh

When trying to login with a user name thats more then 5 charectors and password I get the following error:

Internal Error.
[DBNETLIB][ConnectionOpen (Connect().]SQL Server does not exist or access denied.

The remote server returned an error: (407) Proxy Authentication Required.

I'm getting the same error though two different connections, both with Proxies only allowing WEB access. One requiers the proxy to be setup manually, the other is a transparent proxy.

-MadManX

[Lazybones]

So in other words you are potentially harvesting our forum login credentials into a 3rd party database to which you could abuse...

Knowing some users they use the same name and password on more than one site.. This does not sound good to me.