I just noticed that all of my node passwords are 6-digit numbers. I would like to change the passwords to something more secure, like a 16+ character alphanumeric key. I can't find the place to change these. Where do I go to do that? I also find it a bit odd that the Allstar portal can decrypt my passwords and display them to me. Isn't it standard practice to store passwords with a one-way hash such that it's impossible to recover the original? This seems like something I could fix myself, but I wasn't able to find any of the server code on Github. https://github.com/AllStarLink?tab=repositories Tom KD7LXL
The registration passwords have always been 6 digits. They are generated when the node number is assigned and looks like they can't be changed by the user. Jim, K6JWN ________________________________ From: App_rpt-users <app_rpt-users-bounces@lists.allstarlink.org> on behalf of Tom Hayward <tom@tomh.us> Sent: Tuesday, September 26, 2017 2:17 PM To: Users of Asterisk app_rpt Subject: [App_rpt-users] Node Password I just noticed that all of my node passwords are 6-digit numbers. I would like to change the passwords to something more secure, like a 16+ character alphanumeric key. I can't find the place to change these. Where do I go to do that? I also find it a bit odd that the Allstar portal can decrypt my passwords and display them to me. Isn't it standard practice to store passwords with a one-way hash such that it's impossible to recover the original? This seems like something I could fix myself, but I wasn't able to find any of the server code on Github. https://github.com/AllStarLink?tab=repositories [https://avatars0.githubusercontent.com/u/24500210?v=4&s=400]<https://github.com/AllStarLink?tab=repositories> AllStarLink (AllStarLink) / Repositories · GitHub<https://github.com/AllStarLink?tab=repositories> github.com AllStarLink has 12 repositories available. Follow their code on GitHub. Tom KD7LXL _______________________________________________ App_rpt-users mailing list App_rpt-users@lists.allstarlink.org http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users App_rpt-users Info Page - AllStar Link<http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users> lists.allstarlink.org This list is for users of the app_rpt.c Asterisk application, the Debian Install (for) Allstar Link (DIAL) This site is dedicated to the memory of Jim Dixon WB6NIL To unsubscribe from this list please visit http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button" App_rpt-users Info Page - AllStar Link<http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users> lists.allstarlink.org This list is for users of the app_rpt.c Asterisk application, the Debian Install (for) Allstar Link (DIAL) This site is dedicated to the memory of Jim Dixon WB6NIL You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.
Well, honestly, its never bothered me. It's just the password used to handshake between your node and allstar. The worse that could happen is that someone figures out your code and "borrows" your node number. I've had my node (and my registration password) since 2010, I haven't had any issues with it. ________________________________ From: App_rpt-users <app_rpt-users-bounces@lists.allstarlink.org> on behalf of Tom Hayward <tom@tomh.us> Sent: Tuesday, September 26, 2017 2:38 PM To: Users of Asterisk app_rpt Subject: Re: [App_rpt-users] Node Password On Tue, Sep 26, 2017 at 2:33 PM, Jim Nessen <nessenj@jimsoffice.org> wrote:
The registration passwords have always been 6 digits.
Sounds like you have also noticed the problem! Step 2: figure out who has the power to fix it. Tom KD7LXL _______________________________________________ App_rpt-users mailing list App_rpt-users@lists.allstarlink.org http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users App_rpt-users Info Page - AllStar Link<http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users> lists.allstarlink.org This list is for users of the app_rpt.c Asterisk application, the Debian Install (for) Allstar Link (DIAL) This site is dedicated to the memory of Jim Dixon WB6NIL To unsubscribe from this list please visit http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button" App_rpt-users Info Page - AllStar Link<http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users> lists.allstarlink.org This list is for users of the app_rpt.c Asterisk application, the Debian Install (for) Allstar Link (DIAL) This site is dedicated to the memory of Jim Dixon WB6NIL You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.
participants (2)
-
Jim Nessen -
Tom Hayward