So much for security

[filburt1]

[sql]
SELECT COUNT(*) / 2 FROM user u1, user u2 WHERE u1.password = u2.password AND u1.userid != u2.userid;
[/sql]
...shows you how many nonunique passwords there are. Judging by the forum I tested it on obviously people are still using passwords like "password" and such.

[mr e]

not neccessarily, maybe the md5 just hashes 2 different passwords the same

[filburt1]

The probability of that happening though is extremely low consdering that there are 16^32 permutations, or 3.402823669209385e+38 permutations (Jesus Christ!).

[Link14716]

Or there could jus be a lot of users registering more than one account.

[Erwin]

Wow, filburt1, you have lots of time on your hands. Very interesting query though.

[filburt1]

My spot at school with wireless access during break was down for ten minutes so I opened a terminal, typed MySQL, then random queries

[Xenon]

sorry, but your querie results are incorrect
you have to devide the result by two.

why?

as an example
user1 user2 and user3 have the same password:
result will count:
user1.pw = user2.pw -> 1
user1.pw = user3.pw -> 2
user2.pw = user1.pw -> 3
user2.pw = user3.pw -> 4
user3.pw = user1.pw -> 5
user3.pw = user2.pw -> 6

so there are 3 users with the same password, but the result is 6.

[filburt1]

Good point. Either way the results were horrifying

[Xenon]

yeah, you should check that results for mod users

[filburt1]

Well I won't make a hack though to reject a registration if the password is the same because then the user knows another user there has the same password. If that's what you meant.

BTW, any word on when the announcement Erwin hinted at regarding a new forum here will be posted?