As many of you have already read their is a ruckus going on about what passwords you use and where you use them. For the record:

1. All user passwords on Armorama are MD5 encrypted (http://www.phptr.com/articles/article.asp?p=31690&seqNum=2&rl=1), however Paul Owen's comment that some web admins should not be trusted is true. And for the record I myself always use a different password for sites I want to be more secure.

2. In 4 years of operation I think no one can attest to me ever telling them what their password is, nor could I log into their account (for bug checking, etc) without first changing their password first to one of my own creation. This is just the way this site was coded (and not by me actually but by the original PostNuke programmers).

3. I am directing all staff members to modify their passwords to something complex and unique and to only use that password for this site.

Thanks,
Jim

Wilco.

Done... twice in fact...

Cheers Jim

I changed mine earlier today as a precaution.

All the best

Rowan

Already done - totally different - totally unique - true IT gizmo stuff : caps, numbers, mixed, etc etc.....

Done .....twice too

Roger..... Changed

Already done..

Jim..i changed my password and i wish this event will be the last example of CANDY SECURITY in Armorama... for who may not know what it is it is a term coined by Bellovin and Cheswick to describe a security scenario where the outer perimeter, such as a firewall, is strong, but the infrastructure behind it is weak. The term refers to M&M candy, which has a hard outer shell and soft center....so all members should know some (more or less but as it should be due to our access levels) about website security...at least we should think on how not to be hacked easily.

Done boss.

Pete