https://bugzilla.wikimedia.org/show_bug.cgi?id=17604
^demon <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |[email protected] Component|General/Unknown |General/Unknown Product|MediaWiki |MediaWiki extensions Version|1.15-svn |any --- Comment #2 from ^demon <[email protected]> 2009-02-23 17:50:09 UTC --- I don't see how this reduces password security. Knowing how many digits must be in a password doesn't tell you how many are in one, nor does it tell you how many the average person uses. Same for upper/lowercased numbers. Not to mention: a regex block just blocks a certain format, it doesn't tell you what the password *should* be. Suggestions on how to improve it are welcome, but a blanket "its bad and take it away" isn't helpful. A very good use case would be internal wikis (of which there are many). A company might want their users to use strong passwords, but in reality the chances of someone trying to brute force MediaWiki passwords on an internal network is low. (Switching to extensions because this isn't in core) -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug. You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
