Re: [vchkpw] [SPAM] Password strength bug

2015-09-21 Thread Tonix - Antonio Nati
Il 21/09/2015 14:59, Drew Wells ha scritto: On 09/17/2015 12:28 PM, Tonix - Antonio Nati wrote: Il 17/09/2015 13:18, Drew Wells ha scritto: On 09/15/2015 03:27 PM, Tonix - Antonio Nati wrote: Il 15/09/2015 15:03, Drew Wells ha scritto: On 09/15/2015 11:00 AM, Tonix - Antonio Nati wrote: Il

Re: [vchkpw] [SPAM] Password strength bug

2015-09-21 Thread Drew Wells
On 09/21/2015 02:26 PM, Tonix - Antonio Nati wrote: Il 21/09/2015 14:59, Drew Wells ha scritto: On 09/17/2015 12:28 PM, Tonix - Antonio Nati wrote: Il 17/09/2015 13:18, Drew Wells ha scritto: On 09/15/2015 03:27 PM, Tonix - Antonio Nati wrote: Il 15/09/2015 15:03, Drew Wells ha scritto: On

Re: [vchkpw] [SPAM] Password strength bug

2015-09-21 Thread Matt Brookings
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/21/2015 08:55 AM, Drew Wells wrote: >> I think that permitting a null password, if policy does not admit it, is a >> security hole. >> Prefer you you add another explicit call to be called for no password >> checking (at all). >> >> Regards,

Re: [vchkpw] [SPAM] Password strength bug

2015-09-21 Thread Drew Wells
On 09/17/2015 12:28 PM, Tonix - Antonio Nati wrote: Il 17/09/2015 13:18, Drew Wells ha scritto: On 09/15/2015 03:27 PM, Tonix - Antonio Nati wrote: Il 15/09/2015 15:03, Drew Wells ha scritto: On 09/15/2015 11:00 AM, Tonix - Antonio Nati wrote: Il 15/09/2015 11:03, Drew Wells ha scritto: In

Re: [vchkpw] [SPAM] Password strength bug

2015-09-21 Thread Drew Wells
On 09/21/2015 03:02 PM, Matt Brookings wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/21/2015 08:55 AM, Drew Wells wrote: I think that permitting a null password, if policy does not admit it, is a security hole. Prefer you you add another explicit call to be called for no password

Re: [vchkpw] [SPAM] Password strength bug

2015-09-17 Thread Drew Wells
On 09/15/2015 03:27 PM, Tonix - Antonio Nati wrote: Il 15/09/2015 15:03, Drew Wells ha scritto: On 09/15/2015 11:00 AM, Tonix - Antonio Nati wrote: Il 15/09/2015 11:03, Drew Wells ha scritto: In vpopmail-5.5.0 there seems to be a bug in vpopmail.c where the password strength is checked even

Re: [vchkpw] [SPAM] Password strength bug

2015-09-17 Thread Tonix - Antonio Nati
Il 17/09/2015 13:18, Drew Wells ha scritto: On 09/15/2015 03:27 PM, Tonix - Antonio Nati wrote: Il 15/09/2015 15:03, Drew Wells ha scritto: On 09/15/2015 11:00 AM, Tonix - Antonio Nati wrote: Il 15/09/2015 11:03, Drew Wells ha scritto: In vpopmail-5.5.0 there seems to be a bug in vpopmail.c

[vchkpw] Auto-Re: [vchkpw] [SPAM] Password strength bug

2015-09-15 Thread zhaopin
尊敬的同学:您好! 您的求职简历已经收到,我们会尽快进行阅评,之后再决定是否与您面谈! 中信泰富(中国)投资有限公司 人力资源部 !DSPAM:55f7e0eb41551555158803!

Re: [vchkpw] [SPAM] Password strength bug

2015-09-15 Thread Tonix - Antonio Nati
Il 15/09/2015 11:03, Drew Wells ha scritto: In vpopmail-5.5.0 there seems to be a bug in vpopmail.c where the password strength is checked even if a password isn't used (such as when -e is used to add the encrypted password). Patch attached. I do not understand the problem. Of course

Re: [vchkpw] [SPAM] Password strength bug

2015-09-15 Thread Tonix - Antonio Nati
Il 15/09/2015 15:03, Drew Wells ha scritto: On 09/15/2015 11:00 AM, Tonix - Antonio Nati wrote: Il 15/09/2015 11:03, Drew Wells ha scritto: In vpopmail-5.5.0 there seems to be a bug in vpopmail.c where the password strength is checked even if a password isn't used (such as when -e is used to