Subject Re: [ib-support] fb 8-letter password bug
Author Helen Borrie
At 01:05 PM 04-01-02 +0800, you wrote:
>There's a bug where passwords are validated to the first 8-letters only, right? e.g. password is 'masterkey' but authentication accepts 'masterke'.
>
>Is this going to be corrected soon or is this a low priority?

It's not a bug. InterBase and Firebird only evaluate the first 8 characters of any password, so if you have one user with the password "masterkey" and another with "masterkeeper", they are evaluated and encrypted as identical.

Because 8 characters is easy to crack, you're advised not to use easily guessable words as passwords. Better to create completely random combinations of letters and digits.

Helen


All for Open and Open for All
Firebird Open SQL Database ยท http://firebirdsql.org
_______________________________________________________