View topic - Where is the spring lobby username and password stored?



All times are UTC + 1 hour


Post new topic Reply to topic  [ 13 posts ] 
Author Message
PostPosted: 07 Oct 2011, 23:22 

Joined: 01 Jan 2011, 14:47
Hi guys. I've recently forgot my password for spring so I can't log in to zero-k lobby. So I was wondering where spring saves the account data because I have ticked the box that says "remember password" in spring lobby, and i was hoping that it's possible to recover it. :?:

thanks.


Top
 Offline Profile  
 
PostPosted: 08 Oct 2011, 22:40 
Journeywar Developer & Mapper
User avatar

Joined: 24 Jan 2006, 21:12
Location: There is no god - and reality is his prophetess
You will have to understand, that its quite dangerous to change a pasword. The Reason?

Its actually manual stored. On a RealDrive.
There was this guy, lightning fast on the keyboard, good with remembering words and numbers, little autistic, wanted to change his password constantly. Said he would do everything for a new spring pasword.

We walled him in. Licho is feeding him (thats what the donations are for).We would greatly appreciate it, if you would stop poking into the dark corners of Springs History, unless...


Do you remember all your username and pasword? And how fast can you type? How big are you, and how much do you eat?


Top
 Offline Profile  
 
PostPosted: 08 Oct 2011, 23:03 

Joined: 01 Jan 2011, 14:47
Hi there. All i want to know is where the spring lobby saves session data such as user name and password on my PC, so that I may check the config file (or whatever) to see if i can extract my password from it.
I made the account awhile ago and my password structure has change a lot since then.


Top
 Offline Profile  
 
PostPosted: 08 Oct 2011, 23:12 
Journeywar Developer & Mapper
User avatar

Joined: 24 Jan 2006, 21:12
Location: There is no god - and reality is his prophetess
sorry, joke aside, we cant change passwords, i know it sucks.

you can rename easily though

No clue were the passwords are stored, or why we have passwords at all, and not just a unique cookie for every lobby..


Top
 Offline Profile  
 
PostPosted: 09 Oct 2011, 09:17 

Joined: 01 Jan 2011, 14:47
Well that sucks :( thanks anyway. But as one last shot in the dark. Can anyone delete my account from the Database? If not fair enough, but I don't really care about my stats and maybe i can just re-register my username.


Top
 Offline Profile  
 
PostPosted: 09 Oct 2011, 09:26 
Spring Developer
User avatar

Joined: 22 Sep 2007, 08:51
if it were possible to regain the password from files from your HD, the password-system would be useless.
if we would delete user accounts on request, without the requester being able to prove that it is his account, that would be done by the trolls all the time.

i recommend you to not feel too strongly about your account name.. nobody really cares for the exact name of some other player. just use a similar account name, and people that knew you under your old account will recognize you again. for the new account, i recommend you to use your standard unsafe password, which you use so often that you will never forget it.


Top
 Offline Profile  
 
PostPosted: 09 Oct 2011, 10:06 

Joined: 21 Feb 2009, 07:42
I dont think you can figure out the password because its stored after being md5 hashed (at least for springlobby).

On linux you can find the password hash in ~/.springlobby.conf, on Windows i guess the filename is springlobby.conf but i dont know where it is.

You could try to use an online md5 decoder but to get the original md5 hash you must first base64-decode the hash, after that you have the binary md5 sum which need to be converted to hex text format.


Top
 Offline Profile  
 
PostPosted: 09 Oct 2011, 11:49 
Journeywar Developer & Mapper
User avatar

Joined: 24 Jan 2006, 21:12
Location: There is no god - and reality is his prophetess
paraNoAI you won again!

Somebody could sneak in, stealing your game account, making it impossible for you to play Spring!

There is one logic flaw hidden in the sentence above. 1 Point if you find it.


Top
 Offline Profile  
 
PostPosted: 09 Oct 2011, 12:08 

Joined: 01 Jan 2011, 14:47
What if i could some what prove I own the account? I've used cheat engine to recover my password from the password fealed, But unfortunately the first character is wrong because I was trying to brute force it one character at a time by deleting a character and then trying every combination on my keyboard till it let me log in.
That was dumb, i know :(
Can I PM you my Nickname and what i have of my password as proof?


Top
 Offline Profile  
 
PostPosted: 09 Oct 2011, 12:27 
Lobby Developer
User avatar

Joined: 25 Sep 2006, 12:56
login with springlobby, then type
/changepassword2 newpassword


Top
 Offline Profile  
 
PostPosted: 09 Oct 2011, 12:52 

Joined: 01 Jan 2011, 14:47
No, wait. I've been editing digits of bace64, not my password. I think its impossible to recover my password now. :(


Top
 Offline Profile  
 
PostPosted: 09 Oct 2011, 13:23 
Journeywar Developer & Mapper
User avatar

Joined: 24 Jan 2006, 21:12
Location: There is no god - and reality is his prophetess
well, those words will be lost to the world competition for the smallest inside joke. Use Brain Damages golden override.


Top
 Offline Profile  
 
PostPosted: 09 Oct 2011, 16:36 

Joined: 01 Jan 2011, 14:47
Ah ha! :o it's all good now. I've cycled through all past passwords and now I'm in! thanks anyway guys, I've typed /changepassword2 and I've updated it to my new password structure. :regret:


Top
 Offline Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 13 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group

Site layout created by Roflcopter et al.