Rogue Drone said:
Where do you get this idea? The database here may be encrypted, but it's relatively easy to hack into and access and most certainly the DBA of this domain has complete access to everything posted here with passwords and IPAs and would give up eveything if a judicial order was received.
Again, assume everything here is avaliable, it is, take my word for it, this is the field I work in.
Well, maybe I'm wrong, but I sure as hell don't know how to recover encrypted passwords.
I mean, when you've got something that looks like this:
8dfb9e7410f7cfb23238e0b65d8a6413 (no, it's not real, but an example, and yes that's most likely what bobo would see if he wanted to take a look at your password)
for a password, it's not just stuff everyone can access and crack.
If the passwords are not encrypted, then yeah, it could be relatively easy to get ahold of, I'd assume. A relatively weak server could undergoe a brute force attack and give up admin rights.
I'm sure it's possible, given judicial order.
However, the guy was worried about the "privacy" of his PM's. They're not just going to have e-nerd cops randomly hack peoples usernames to check their PM's, etc. His PM's are pretty damn private.
Plus, I operate a phpBB forum and I don't have access (as admin) to everyone's PM's and passwords. So, although you may be able to prove me wrong--being that it's your line of work and all--that's where I'm coming from.
I'd be curious to know why you say Bobo has access to our passwords and PM's other than the fact that he's an admin.
edit: Oh, and yes, I know you can set up your forum, etc, to do whatever you want...