On Wed, Mar 6, 2013 at 7:12 PM, Petr Bena <[email protected]> wrote:
> Do you know that we are talking about labs and not production? I don't
> want to look like some insecure-stuff loving guy - but why in the
> world someone wanted to brute force into labs?

Why invite them to?

> If I was hacker and I
> wanted to get into labs - I would just request an account and I would
> get it...

Also, some parts of labs may have different security needs than
others. Brute forcing a password gets you access to what that user
already has access to. Making a new account starts you out with almost
no access.

> Do we need some high tech security here?

What does it hurt?

_______________________________________________
Labs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/labs-l

Reply via email to