MN Brewers, 

I just talked to Ryan about his concerns regarding the Renaissance Contest website.  Like Ryan, we are all concerned about the security of people's passwords.  Based on his input, we made a small change to our process.  I appreciate Ryan bringing this up and sharing his concerns! 

Here's a few very important clarifications about Secure passwords and the Renaissance Contest website. 

The system provides secure storage of passwords in MD5 encrypted format.  Your password is NOT in danger of being hacked / stolen / misplaced! 

The Drupal community provides timely security updates for Drupal websites, that's why we are using it.  The site is up to date with all security fixes in place. 

As part of the registration process, we WERE emailing account credentials back to participants.  As Ryan stated (and I completely agree), this is NOT secure.  We have changed the emails so that the site is no longer sending the password in the registration email. 

I also agree with Ryan about passwords - don't use the same password for all your accounts! 

If you have concerns about your password on the site, it's very easy to change it.  Just log into the website, and visit the account page:
http://www.rennfestbeercup.com/user
Click the edit tab and update your password. 

If you have concerns about the security of the site, feel free to contact me via email or phone:

Wilbur Ince
651.488.6112
Byggvir's Big Beer Cup Webmaster





On 09/12/2011 01:32 PM, Ryan Sinn wrote:
Just an FYI:

In my opinion, don't use a password you currently use (or anything similar to something you would like to use) for Byggvir's website registration.

The rennfestbeercup.com site is storing your Byggvir login credentials in plain text and then mailing it back to you (in plain text) via email. 

It's ripe to get hacked / stolen / misplaced and the password + email will be available to unencrypted.

I emailed them about it a few weeks ago and haven't heard back. 

It's a really unfortunate information security situation.

Website is great otherwise!


Ryan

On 9/12/2011 9:31 AM, Mike Behrendt wrote:

FYI - Get your entries in for Renn Fest!!!

 

//Mike Behrendt

 

From: Eric Wentling [mailto:jackofallbrews@yahoo.com]
Sent: Monday, September 12, 2011 9:03 AM
To: Michael Behrendt
Subject: Byggvir Deadline today!

 

Hey Mike,

 

Could you pass this on to the MHBA?

 

 

Hey fellow homebrewers!  Byggvir's Big Beer Cup registration and deadline is tonight!  We only need a few more beers to break 150 entries, so help us out!  Drop off at Northern Brewer and Midwest until close today, and register and pay at www.rennfestbeercup.com.

 

Thanks to those of you who have already put in beers, meads and ciders and those who have signed up to volunteer!

 

--Eric Wentling

Organizer



_______________________________________________
mba mailing list
mba@thebarn.com
http://www.thebarn.com/mailman/listinfo/mba



_______________________________________________
mba mailing list
mba@thebarn.com
http://www.thebarn.com/mailman/listinfo/mba