https://bugzilla.wikimedia.org/show_bug.cgi?id=17604

           Summary: Delete Extension:Passwordstr
           Product: MediaWiki
           Version: 1.15-svn
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: major
          Priority: Normal
         Component: General/Unknown
        AssignedTo: [email protected]
        ReportedBy: [email protected]
                CC: [email protected]


The Extension:Passwordstr purposely weakens user password
strengths by excluding many possible passwords from the
choices, users can make. By its regexp rules, many of which
can easily be determined automatically, brute force password
cracking automats can spare some tests and thus find passwords
faster.

We should recommend not using this kind of pseudo-wannabe-security.
Better delete the extension altogether.


-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to