» Search forum


Index :: Comments and suggestions :: Needs to change password for all projects.


Pages: [1]
Sandman192
BAM!ID: 28632
Joined: 2007-06-13
Posts: 8
Credits: 1,453,662,486
World-rank: 1,543

2020-10-10 00:51:37

I would like to change my BAM password and have it change all my project passwords.
I created an account from the original site with a different password. But I can't add that project from BAM without changing the project password to the BAM password. Why are all the places I go on singing in is this the only site that you can not change your password.

This is for suggestions form. I need to change my password.
Software: Win 10 Pro 64 bit, Video Drivers v471.11, CUDA v11.4, V-Box 6.1.22
Hardware: ASUS X-99 Deluxe-i7 5930K Extreme Edition 3.50Ghz to 4.10, 12 core-32GB of Ram, EVGA GTX 1080Ti 11GBs, EVGA GTX 980 GTX 4GBs, 512GB M.2 for BOINC Program and 3TB HDD
TeeVeeEss
  Donator
Tester - Translator - BOINCstats SOFA member
BAM!ID: 2648
Joined: 2006-06-27
Posts: 803
Credits: 12,640,776,296
World-rank: 309

2020-10-13 18:46:40

? At https://www.boincstats.com/bam/account/ you can change your BAM! password when you click the Edit button. BAM! can however only manage your projects if your BAM! password is the same as the password you use for the individual projects. In other words: all project passwords and your BAM! password need to be the same.
TankbusterGames
 
BAM!ID: 240550
Joined: 2021-04-26
Posts: 66
Credits: 63,152,047
World-rank: 14,325

2021-12-07 06:03:02
last modified: 2021-12-07 06:03:52

This is a huge security risk.
Some BOINC Projects don't use SSL/TSL on their website. If every project including boincstats has the same login details, that's pretty bad.
This is really the only thing that is essential for BAM to change
Password per project...
[BOINCstats] Willy
 
Forum moderator - Administrator - Developer - Tester - Translator
BAM!ID: 1
Joined: 2006-01-09
Posts: 9408
Credits: 350,105,495
World-rank: 4,363

2021-12-07 08:04:47

At least the password is not send "as is" to the project, a hash is used. Unfortunately, the hash is pretty weak (md5). Can't change this to a better hash unless the BOINC web code is changed.
Please do not PM, IM or email me for support (they will go unread/ignored). Use the forum for support.
gemini8
BAM!ID: 101557
Joined: 2011-06-14
Posts: 90
Credits: 2,044,852,368
World-rank: 1,199

2021-12-09 06:19:29

What you can do is use your weak account key to attach your machines to projects wherever possible.
I think there are a few projects that don't support it, but for the rest you can do this.
- - - - - - - - - - -
Greetings, Jens
Pages: [1]

Index :: Comments and suggestions :: Needs to change password for all projects.
Reason: