|
?
Do you mean @OriginalGriff ?
M.D.V. 
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
|
|
|
|
|
Correct - it now sends an email:
Do not hit 'reply' to this email: To reply, click here.
Nelek has mentioned you directly in a new comment at "Site Bugs / Suggestions":
?
Do you mean @OriginalGriff ?
M.D.V.
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
________________________________________
CodeProject
Note: This message has been sent from an unattended email box. Which refers to you by just your username, with your login email no longer being sent to me.
From a security POV, much better!
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
|
|
|
|
|
Now you know what you mean. And I agree with you 
M.D.V.
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
|
|
|
|
|
OriginalGriff wrote: Definitely a good change
Maybe for the rest of us... I am sure your email address is publicly known here. 
You have just been Sharapova'd.
|
|
|
|
|
I already explained a few days ago. [^]
|
|
|
|
|
Today I accidentally double-posted a reply in a forum and no warning arose - I remember there was a nifty warning telling "It appears you already posted an answer with the same content", but it didn't trigger that time.
You see, often when I click on send my finger bounces sligthly on the mouse button causing two clicks in rapid sequence, and that warning prevented quite a number of such occurrences.
Geek code v 3.12 {
GCS d--- s-/++ a- C++++ U+++ P- L- E-- W++ N++ o+ K- w+++ O? M-- V? PS+ PE- Y+ PGP t++ 5? X R++ tv-- b+ DI+++ D++ G e++>+++ h--- r++>+++ y+++*
Weapons extension: ma- k++ F+2 X
}
If you think 'goto' is evil, try writing an Assembly program without JMP. -- TNCaver
|
|
|
|
|
Possibly a high load on the database at that point may have caused a timeout when it was checking for the existence of your previous message. Unlikely but possible. It happens.
cheers
Chris Maunder
|
|
|
|
|
Whatcha doing here? Shooo, to the mountains were you belong.
JK. Have a nice time off work.
|
|
|
|
|
And that took him 12min to download...
|
|
|
|
|
SquirrelNet. It's a pay per peanut system.
By the time I've downloaded I'm up to date wiht yesterday.
cheers
Chris Maunder
|
|
|
|
|
Chris Maunder wrote: By the time I've downloaded I'm up to date wiht yesterday.
And out of nuts?
|
|
|
|
|
I have noticed that I have a message displayed when I open an questions in Q&A.
The message is Quote: Your status enables you to edit this question. Alternatively, if the question is incomplete or simply isn't a question, then please report it.
Any specific reason for this feature? So everyone can edit the questions?
cheers,
Super
------------------------------------------
Too much of good is bad,mix some evil in it
|
|
|
|
|
You can edit questions and answers now because you have earned the privilege to do so since you got Silver Author status. Check the Privileges tab on your profile.
The quick brown ProgramFOX jumps right over the Lazy<Dog>.
|
|
|
|
|
Hmm Interesting. I did not realize I became silver. Last time I saw it I was still in bronze with 500+ points.
Good to know
cheers,
Super
------------------------------------------
Too much of good is bad,mix some evil in it
|
|
|
|
|
The only caveat is that you shouldn't edit spam posts - if you do then it may confuse the spam detector. Mark and report those as usual.
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
|
|
|
|
|
I haven't been on this site in a while, so I forgot my password. I clicked the link, and The Code Project sent me my password in clear text in an email.
I would think that a site that specializes in advice for coders would know better than to store passwords using reversible encryption or send them in clear text.
It's a sad state of affairs, but many people use the same password across multiple sites. By keeping users passwords in the clear, your site is a tempting target for hackers, and if they do compromise your database, then thousands of passwords will be exposed.
In this day and age, the state of your security is inexcusable. Please fix this immediately. Your reputation is already tarnished - no serious software engineer would allow this glaring flaw to make it into production. Please take action before more than your reputation is at stake.
|
|
|
|
|
Are you sure it was your previous password (which you can't remember), and not a new, randomly generated password? 
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
The password you received is a temporary one. Only valid for 1hour.
When you log in with that temporary password it becomes your permanent password (until you change it again).
This is very clearly stated on the screen after submitting the 'forgot my password'.
Please note: The temporary password that was sent will expire in 1hr. Your existing password (should you remember it) will remain valid until you update it. If you log in with your temporary password, your existing password will be updated to be the temporary password you entered.
So no your password is not saved in clear text.
Tom
|
|
|
|
|
You needed to pepper your post with statements like
"Being a coder you should know this.." and "It's a sad state of affairs.." and "Your reputation was low anyway..." and so on
|
|
|
|
|
I, too, would like Code Project to send the encrypted password instead of the one in clear text in the email.
modified 25-Aug-15 8:17am.
|
|
|
|
|
Rage wrote: send the encrypted password instead of the one in clear text in the email
How would that work? 
If they sent you the password hash, you'd have no way to determine what the password was, and no way to log in.
If they changed everything to used reversible encryption - which would be a terrible idea! - and sent you the encrypted password, they'd also have to send you the encryption key so that you could decrypt the password. Making the encryption key public would defeat the whole purpose of encrypting the passwords.
Sending a temporary, randomly-generated, time-limited password to your registered email address is the only sensible way to handle a forgotten password.
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
Nevermind, I definitely need to use the joke icon when it is meant to. This was of course irony10. 
|
|
|
|
|
bgard69772 wrote: I would think that a site that specializes in advice for coders would know better than to store passwords using reversible encryption or send them in clear text.
So would we. So we don't.
As explained, the password sent to you is a random, temp password with a limited time span. Your password is not saved by our system, only a salted hash with many iterations.
cheers
Chris Maunder
|
|
|
|
|
Christ! are we having a bad day? Really though you should think a bit more before making such ignorant remarks. The last three sections were completely unnecessary.
"the debugger doesn't tell me anything because this code compiles just fine" - random QA comment
"Facebook is where you tell lies to your friends. Twitter is where you tell the truth to strangers." - chriselst
"I don't drink any more... then again, I don't drink any less." - Mike Mullikins uncle
|
|
|
|
|
Message Removed
modified 24-Aug-15 6:00am.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
