Please don't email my password in plaintext

[Cero]

sha512 hasn't shown collisions, afaik

SHA512 has 512 bits (64 bytes).

Computing all hashes from all possible unique files of 65 bytes, you will find at least 256 collisions.
Computing all hashes from all possible unique files of 66 bytes, you will find at least 65536 collisions.
Computing all hashes from all possible unique files of 67 bytes, you will find at least 16777216 collisions.

I'm no security expert.
http://en.wikipedia.org/wiki/SHA-2

SHA-2 - SHA-512/384, Collisions found: none

So I thought, with everything below SHA-2, including obviously stuff like md5, collisions have been found; therefore they are insecure.

[OttoMeier]

What you need to do is salting your hash.

thats simple just use the user name.
 user name +password->hash->db  
(user name name is stored in plain text with the hashcode) in db.
I know that that sounds strange but its "secure".

[Riven]

What you need to do is salting your hash.

thats simple just use the user name.
 user name +password->hash->db  
(user name name is stored in plain text with the hashcode) in db.
I know that that sounds strange but its "secure".

It doesn't sound strange, it's "obvious".

Games published by our own members! Check 'em out!

[theagentd]

sha512 hasn't shown collisions, afaik

SHA512 has 512 bits (64 bytes).

Computing all hashes from all possible unique files of 65 bytes, you will find at least 256 collisions.
Computing all hashes from all possible unique files of 66 bytes, you will find at least 65536 collisions.
Computing all hashes from all possible unique files of 67 bytes, you will find at least 16777216 collisions.

I'm no security expert.
http://en.wikipedia.org/wiki/SHA-2

SHA-2 - SHA-512/384, Collisions found: none

So I thought, with everything below SHA-2, including obviously stuff like md5, collisions have been found; therefore they are insecure.

This should be obvious? >_> I mean, a 512-bit hash can only hold a certain number of different values (as many as a Java long), so it's obvious that 2 or more passwords longer than 64 bytes will end up with the same hash. If this wasn't the case then hashes could be used for file compression to compress any file to 64 bytes. Yaaaay.

[Riven]

512-bit hash can only hold a certain number of different values (as many as a Java long)

[Shazer2]

Update or change to MyBB, much more secure. They are free and provide a merge tool. 

[ra4king]

512-bit hash can only hold a certain number of different values (as many as a Java long)

What kind of wonky math are you doing?

[Cero]

file compression ?

sha are hash functions. its not RSA. you cant decrypt a hash to the original content =0

[ra4king]

@Cero
He meant that if there were no collisions in SHA-512 at all, then you could be able to get the original content of any file using the hash.

[Shane75776]

<OT>
@Shane75776:  Why do the (non-working) links in your signature read like they're links to malware?
</OT>

Hahaha he just failed at correctly setting up the URL tag

When you fix them, the first link gives me a 404 and the second link is to a fraud/malware "satellitedirect" site

huh thats messed up. not sure what the links are for. Must have been really old links from way back when I first
signed up for this forum.

Games published by our own members! Check 'em out!

[theagentd]

512-bit hash can only hold a certain number of different values (as many as a Java long)

What kind of wonky math are you doing?

Gah! Mixing up bits and bytes... Long = 64 bits, SHA-512 = 64 bytes. >_>