Comments on: MySQL Security http://www.mysqlfanboy.com/2012/06/mysql-security/ Almost crazy about Opensource / Free information. Fri, 25 Oct 2013 15:37:31 +0000 hourly 1 http://wordpress.org/?v=3.8 By: Manuel http://www.mysqlfanboy.com/2012/06/mysql-security/comment-page-1/#comment-2351 Wed, 27 Mar 2013 14:18:25 +0000 http://www.mysqlfanboy.com/?p=830#comment-2351 Hi again,
can you say me what is wrong in this algorythm:

select cast(sha1(
concat(unhex(’2e59557d363440263c3d5b332e2a2623795b3b56′),
unhex(sha1(sha1((‘P@ssw0rd’))))))
as char) c;
assuming 2e59557d363440263c3d5b332e2a2623795b3b56 is the hex representation of then scramble.

Thank you.

]]> By: Manuel http://www.mysqlfanboy.com/2012/06/mysql-security/comment-page-1/#comment-2350 Sat, 23 Mar 2013 14:32:36 +0000 http://www.mysqlfanboy.com/?p=830#comment-2350 Other question: when i use an online SHA1 Generator always become a 40 size char like dc76e9f0c0006e8f919e0c515c66dbba3982f785. But your examples show chars like
Ib0S3Bg/dA7nbye3jrOcitlyp1c=
Are there diferents types of SHA1?

Thank you.

]]> By: admin http://www.mysqlfanboy.com/2012/06/mysql-security/comment-page-1/#comment-2349 Mon, 18 Mar 2013 20:15:04 +0000 http://www.mysqlfanboy.com/?p=830#comment-2349 The scramble (a random code made by the MySQL server) is add (pre-pended) to the SHA1 of the stage1_hash.

In my example that would be 1a2b3c4d + Ib0S3Bg/dA7nbye3jrOcitlyp1c= or “1a2b3c4dIb0S3Bg/dA7nbye3jrOcitlyp1c=”

]]> By: Manuel http://www.mysqlfanboy.com/2012/06/mysql-security/comment-page-1/#comment-2348 Wed, 13 Mar 2013 13:33:08 +0000 http://www.mysqlfanboy.com/?p=830#comment-2348 Hi Mark,
what do you mean with:

SHA1(scramble + SHA1(stage1_hash)

scramble must be added to sha1-function’s return? How?
Thanks in advance,
Manuel

]]> By: Chip Barrere http://www.mysqlfanboy.com/2012/06/mysql-security/comment-page-1/#comment-933 Sat, 23 Jun 2012 04:26:59 +0000 http://www.mysqlfanboy.com/?p=830#comment-933 Great post, Mark! It forced me to rethink my own security practices.

]]> By: Accutech http://www.mysqlfanboy.com/2012/06/mysql-security/comment-page-1/#comment-811 Tue, 19 Jun 2012 17:25:43 +0000 http://www.mysqlfanboy.com/?p=830#comment-811 Great information thanks for the post. Great detail I look forward to the next post

]]>