{"action":"created","issue":{"url":"https://api.github.com/repos/rockstor/rockstor-core/issues/1290","repository_url":"https://api.github.com/repos/rockstor/rockstor-core","labels_url":"https://api.github.com/repos/rockstor/rockstor-core/issues/1290/labels{/name}","comments_url":"https://api.github.com/repos/rockstor/rockstor-core/issues/1290/comments","events_url":"https://api.github.com/repos/rockstor/rockstor-core/issues/1290/events","html_url":"https://github.com/rockstor/rockstor-core/issues/1290","id":150588529,"number":1290,"title":"Password recovery system - improvements and/or better docu needed","user":{"login":"MFlyer","id":17988902,"avatar_url":"https://avatars.githubusercontent.com/u/17988902?v=3","gravatar_id":"","url":"https://api.github.com/users/MFlyer","html_url":"https://github.com/MFlyer","followers_url":"https://api.github.com/users/MFlyer/followers","following_url":"https://api.github.com/users/MFlyer/following{/other_user}","gists_url":"https://api.github.com/users/MFlyer/gists{/gist_id}","starred_url":"https://api.github.com/users/MFlyer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/MFlyer/subscriptions","organizations_url":"https://api.github.com/users/MFlyer/orgs","repos_url":"https://api.github.com/users/MFlyer/repos","events_url":"https://api.github.com/users/MFlyer/events{/privacy}","received_events_url":"https://api.github.com/users/MFlyer/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":11,"created_at":"2016-04-23T19:28:00Z","updated_at":"2016-05-26T09:05:46Z","closed_at":null,"body":"As suggestend in the issue subject, referencing [this](https://forum.rockstor.com/t/feature-request-better-password-recovery-mechanism/1400/2) forum thread too, probably we could improve password recovery system"},"comment":{"url":"https://api.github.com/repos/rockstor/rockstor-core/issues/comments/221817262","html_url":"https://github.com/rockstor/rockstor-core/issues/1290#issuecomment-221817262","issue_url":"https://api.github.com/repos/rockstor/rockstor-core/issues/1290","id":221817262,"user":{"login":"MFlyer","id":17988902,"avatar_url":"https://avatars.githubusercontent.com/u/17988902?v=3","gravatar_id":"","url":"https://api.github.com/users/MFlyer","html_url":"https://github.com/MFlyer","followers_url":"https://api.github.com/users/MFlyer/followers","following_url":"https://api.github.com/users/MFlyer/following{/other_user}","gists_url":"https://api.github.com/users/MFlyer/gists{/gist_id}","starred_url":"https://api.github.com/users/MFlyer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/MFlyer/subscriptions","organizations_url":"https://api.github.com/users/MFlyer/orgs","repos_url":"https://api.github.com/users/MFlyer/repos","events_url":"https://api.github.com/users/MFlyer/events{/privacy}","received_events_url":"https://api.github.com/users/MFlyer/received_events","type":"User","site_admin":false},"created_at":"2016-05-26T09:05:46Z","updated_at":"2016-05-26T09:05:46Z","body":"This is getting interesting :smile: \r\n\r\n@maxhq you're not paranoid and this is how I'm going to code, after looking to my partner home banking pin card too:\r\n\r\n- Pin card with 24 * 3 chars pins (that means a 72 chars string)\r\n- Every pin will not stored in plain text, but on MD5, although cracking a 3 chars md5 it's quite easy (pls read this interesting [post](https://blog.codinghorror.com/speed-hashing/) from Jeff Atwood, Stack Overflow daddy and Discourse - forum system used by Rockstor too - co-founder)\r\n\r\nSo we don't care about MD5 pins cracking? No, I care, but I'm not afraid about that:\r\nRockstor postgresql dbs are accessible only from localhost and if you want to connect to a Rockstor db from another machine you have to append connection over an ssh tunnel, so that means you already know root password -> if you already know root password you don't need to crack pins to reset root password :wink:\r\n\r\nFinally, if you don't know current root password you can't access dbs tables and pins data (thinking about this we should also leave them in plain text, but anyway we'll have them encrypted!)"}}
{"actor":{"display_login":"MFlyer"}}