The Joomla! Forum™

It seems that the password change is the main reason one might apply this fix.  I would like to know if it is worth doing so. I can't figure out how an attacker would get a hashed password; without that, rainbow tables are irrelevant. Can someone please say how hashed passwords are exposed? Tha...

Rainbow tables let you turn a hashed password into a password.

So, how would an attacker get a hashed Joomla password?

What is the scenario for this vulnerability?

Thanks,

David

I am as impatient as anyone to see 1.5 beta, but I wish people would stop fussing about the date. Look, this will be a beta , and given the amount that has been rewritten, it will be quite buggy.  Its value to users will be only as a feature preview. It will probably take months after the first...

Thanks for the clarification.  Glad to hear about the improvement.

Will the new method also address the proxy / session-timeout problem?  Just out of curiosity...  The current fix isn't working very well for me.

Wait a minute -- have I missed something??  Is vBulletin going to get special support in J! 1.5, or does the "yes" here just mean that the existing third-party bridge components will be upgraded to support J! 1.5?

Thanks...

Some categories have a bunch of alternatives -- forum components, for example -- that are each complex.  It's hard to know which to choose, especially because it may be difficult or impossible to track down feature lists for them. It would be a huge help if the extensions site had a feature mat...