Package: pwgen
Version: 2.03-1
Severity: minor
Tags: l10n

pwgen lacks an option to generate passwords without vowels.  This is
important when generating passwords for new users, since vowels
allow the possibility for offensive substrings.

As an example, the very first time I ran "pwgen -s", one of the entries
was "W8qrKIKE".  

It would be possible to set up a blacklist of rude words, but l10n
issues make it impossible to reach any sort of completeness.  As part of
my job, I set up mailing lists for Free Software community members
around the world.  In this circumstance, even my own human inspection of
the generated password is insufficient.  Is the word a slur in
Portuguese?  In Farsi?  In any of the Bantu languages?

Allowing the generation of vowelless passwords (as is currently possible
with numeralless generation) solves this problem fairly globally.  Hints
at rude patterns may still appear, but would largely be in the mind of
the reader.

This ought to be a simple fix.  If this gets filed as -ENOPATCH, I will
happily try to find time to add the feature.


-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.17.4-linode23
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages pwgen depends on:
ii  libc6                 2.3.2.ds1-22sarge4 GNU C Library: Shared libraries an

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to