ALERT!
Click here to register with a few steps and explore all our cool stuff we have to offer!
Home
Upgrade
Credits
Help
Search
Awards
Achievements
 13710

Demon Chat - "Chat with fellow Demons!"

by Verity - 12-06-2015 - 09:08 AM
#11
(12-06-2015 - 11:28 PM)Nova Wrote: I'll try it out soon.

Alright but I've created this in VB.NET, and Its PHP & MYSQL combined. So everything is secure.
Free Image Hosting: IMAGE YOGA (IMGYOGA)
My Anime List(Last Updated: 2 Years Ago): ANL
[Image: rNNka.gif]
Reply
#12
(12-06-2015 - 02:10 PM)Murdock Wrote: I can setup a server that uses I2P to fully encrypt everything. No logs will be stored on the server only on your local machine as tmp files. My own team uses it, let me know if interested.

Once This Happens And Its Updated I Will Use It! Lmk When It Is
Quote:"You cant fix stupid."
Reply
#13
How do i sign up on this or do i just use my df login?
Reply
#14
(12-07-2015 - 03:15 AM)HostedLobby Wrote: How do i sign up on this or do i just use my df login?

Download the program and register!
Free Image Hosting: IMAGE YOGA (IMGYOGA)
My Anime List(Last Updated: 2 Years Ago): ANL
[Image: rNNka.gif]
Reply
#15
UPDATED TO VERSION: 2.0.0.0!

NEW DOWNLOAD LINK POSTED!
Free Image Hosting: IMAGE YOGA (IMGYOGA)
My Anime List(Last Updated: 2 Years Ago): ANL
[Image: rNNka.gif]
Reply
#16
(12-07-2015 - 04:45 AM)Verity Wrote: UPDATED TO VERSION: 2.0.0.0!

NEW DOWNLOAD LINK POSTED!

:)
[Image: fi1z8QY.jpg]


DemonForums Co-Founder
Reply
#17
gg, looks good
Reply
#18
(12-06-2015 - 11:18 PM)Verity Wrote:
(12-06-2015 - 10:31 PM)Nova Wrote: This looks cool, but it logs your password on a program which is annoying.

As you see the passwords are just scrambled words and letters. So in no way will I get anyones password.

[Image: 09f6da518787d31e840ce034f69d1ef6.png]

It's a bit late now, but you would be alot more secure if you used a high gpu cost hashing algorithm like Bcrypt with extra rounds rather than using compression and ciphers.

[~]!# Official member of Trojan Security

"If you don't like it, try and hack me!"

Private databases for Sale (BTC only), PM for information


Coachella 2017 [EXTREMELY PRIVATE]
ESEA 2017 [EXTREMELY PRIVATE]
MajorLeagueGaming Forums 2016 [EXTREMELY PRIVATE]
MMO-Champion 2017 [EXTREMELY PRIVATE]
NextGenUpdate 2016 [EXTREMELY PRIVATE]
XDA-Developers 2016 [EXTREMELY PRIVATE]

Ps3Hax 2017 [PRIVATE]
Reply
#19
(12-07-2015 - 08:11 PM)Murdock Wrote:
(12-06-2015 - 11:18 PM)Verity Wrote:
(12-06-2015 - 10:31 PM)Nova Wrote: This looks cool, but it logs your password on a program which is annoying.

As you see the passwords are just scrambled words and letters. So in no way will I get anyones password.

[Image: 09f6da518787d31e840ce034f69d1ef6.png]

It's a bit late now, but you would be alot more secure if you used a high gpu cost hashing algorithm like Bcrypt with extra rounds rather than using compression and ciphers.

Maybe he doesn't know how to do that and just created it with the knowledge he has.
Reply
#20
(12-07-2015 - 08:13 PM)Nova Wrote:
(12-07-2015 - 08:11 PM)Murdock Wrote:
(12-06-2015 - 11:18 PM)Verity Wrote:
(12-06-2015 - 10:31 PM)Nova Wrote: This looks cool, but it logs your password on a program which is annoying.

As you see the passwords are just scrambled words and letters. So in no way will I get anyones password.

[Image: 09f6da518787d31e840ce034f69d1ef6.png]

It's a bit late now, but you would be alot more secure if you used a high gpu cost hashing algorithm like Bcrypt with extra rounds rather than using compression and ciphers.

Maybe he doesn't know how to do that and just created it with the knowledge he has.

All the more reason for me to point it out and give him a push in the right direction for next time. The problem is most hashing functions lose a part of the original strings making them irreversible. Meaning he can't update the existing passwords with a new algorithm unless he either... 1. extends from the old algorithm (ie wraps the current algorithm in say sha1().) or 2. resets all passwords with a new algorithm and lets the users change them after confirming their email access.

But this looks like a reversible cipher to me, which means it would be an encryption algorithm, not a hashing algorithm (encryption is 2 way [encrypt <-> decrypt] while hashing is a single way encrypt -> decrypt). If the creator could reply with an answer to whether he created this cipher compression algorithm himself, it would make things alot easier for me to give ways to improve it.

Upon further inspection it looks like des(unix) in which the first 2 characters are the salt.

[~]!# Official member of Trojan Security

"If you don't like it, try and hack me!"

Private databases for Sale (BTC only), PM for information


Coachella 2017 [EXTREMELY PRIVATE]
ESEA 2017 [EXTREMELY PRIVATE]
MajorLeagueGaming Forums 2016 [EXTREMELY PRIVATE]
MMO-Champion 2017 [EXTREMELY PRIVATE]
NextGenUpdate 2016 [EXTREMELY PRIVATE]
XDA-Developers 2016 [EXTREMELY PRIVATE]

Ps3Hax 2017 [PRIVATE]
Reply

Users browsing: 14 Guest(s)