If you know how they were obtained, Is it better to keep rehashing the passwords or is it better to FIX HOW they obtained them in the first place to stop that happening again. IF security is tightened down and the holes are FIXED, there would be no reason to have the extreme method of hashing that you suggest. Your method is not preventing them gaining entry is it? yes it might slow them down, but if they have got that far as to be able to retrieve the hashed password in the first place, then i'm afraid that to me is a bigger issue at hand!! That is what I am saying which you so completely misunderstood again.

to put it in a different analogy: Close the doors & windows securely and your jewellery can't be stolen, not as easily anyway.

Is it a joke?

If your aware of my stance in the community you will also know that I share the same concerns as many others, lack of communications, releases, and so-forth, however along with the support of some key players here I've had an insight into what's happening, I've not seen the whole picture, but I have seen enough to believe that a real wave of change is upon us, all it will take on our part is a little patience and support.

I believe from the insight I've seen, in this instance, it's not a joke

McDonald wrote:
devteam.xoops.org seems to be dead for a while already. The files in the snapshots folder were available for a long time but are gone now also.

McDonald wrote:
Moving to XOOPS Cube might be an idea but what if we all move to XC and take our unsolved problems with us?
Will XC end up in the 'same state' as XOOPS is right now?

So what does this mean for you?

That means that whatever 2.x version you're actually using, you'll all be able to upgrade to the next version. However, as focus will be on this particular point, some of the most important changes present in the 2.3 branch of the SVN repository may be kept for later and won't be included in it.

The next question to be raised would be when?

Well there is no set date, however we're informed this won't be a few months, it will be sooner.

There would be no point in the community pushing for a date, if the release was delayed even by a day this will inevitably lead to disappointment.

The XOOPS Dev Team is requesting that the community gets involved and participates, there are still numerous bugs waiting to be fixed or reviewed on the Sourceforge site. Your help is welcome.