3 ms·
Yes, this is the important point. Changing someone's password is not just locking them out, it's allowing you to log in as them. I have control of a user datab
by freehunter 7y ago
Yes, this is the important point. Changing someone's password is not just locking them out, it's allowing you to log in as them.
I have control of a user database for my site. I cannot log in as my users since I don't know their password and the database is hashed. But if I log into the database and change their password, now I know what their password is. And now I can log in as them.
- em-bee 7y agodepends on how it's done. i could randomize the password in such a way that i don't know what it is. better yet, since the password should be stored in hashed form, just changing that string would change the password to one that is unknown or even impossible. that's how i lock unix accounts.