Re: User Profile Info -- MIDRANGE-L

× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.

Subject: Re: User Profile Info
From: James Lampert <jamesl@xxxxxxxxxxxxxxxxx>
Date: Tue, 28 Aug 2007 12:34:56 -0800
List-archive: <http://archive.midrange.com/midrange-l>
List-help: <mailto:midrange-l-request@midrange.com?subject=help>
List-id: Midrange Systems Technical Discussion <midrange-l.midrange.com>
List-post: <mailto:midrange-l@midrange.com>
List-subscribe: <http://lists.midrange.com/mailman/listinfo/midrange-l>, <mailto:midrange-l-request@midrange.com?subject=subscribe>
List-unsubscribe: <http://lists.midrange.com/mailman/listinfo/midrange-l>, <mailto:midrange-l-request@midrange.com?subject=unsubscribe>

rob@xxxxxxxxx wrote:

The security risk factor is that any dweeb can query the file and find out a list of all user profiles and get cute with those that have never changed their passwords from default. A rather significant percentage actually.

There's actually a very easy way to avoid that: whenever you create a new user profile, expire the default password. That's what I do.

As an Amazon Associate we earn from qualifying purchases.

Follow-Ups:

Re: User Profile Info , rob
Re: User Profile Info , Tommy . Holden

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.