New submission from Thibault Fevry: As explained in issue 519, one can sort usernames using the password key : http://bugs.python.org/user?@sort=password
This allows for a user to modify his password and see where he stands until he guesses another password. This being easy to script seeing how easy it is to change a password, the issue must be fixed. ---------- messages: 2749 nosy: iwontbecreative, lemburg priority: critical status: unread title: Security : password sorting issue that might allow to recover passwords. _______________________________________________________ PSF Meta Tracker <metatrac...@psf.upfronthosting.co.za> <http://psf.upfronthosting.co.za/roundup/meta/issue520> _______________________________________________________ _______________________________________________ Tracker-discuss mailing list Tracker-discuss@python.org http://mail.python.org/mailman/listinfo/tracker-discuss
