|
From: | Luiji Maryo |
Subject: | Re: [Savannah-users] password must be more complicated |
Date: | Tue, 7 May 2013 15:47:30 -0400 |
Hi Bob,
[...]
On Tue, May 7, 2013 at 1:48 AM, Bob Proulx <address@hidden> wrote:
> Setting match=0 seems to help with the "dictionary" issue.
>
> $ echo ohtaOe0h | pwqcheck -1 match=0 max=256 min=disabled,24,11,8,7
> OK
>
> $ echo uChiel9m | pwqcheck -1 match=0 max=256 min=disabled,24,11,8,7
> OK
>
>I can confirm that the previous settings in Savannah (haven't checked
> Does anyone see why the results are so crazy using pwqcheck? Is this
> problem causing users grief? Or a different problem?
now) would not allow a few completely random passwords because they
were apparently based on dictionary words. It was immensely
frustrating (as a user) to be first told that none of my common
passwords pass, then turn to a password generator and be told that a
password looking like "ohtaOe0huChiel9m" is based on a dictionary
word. I think it took me 3 tries to generate something that would be
acceptable (longer passwords are more likely to have a 4-character
sub-string that is apparently based on a dictionary word).
Jan
[Prev in Thread] | Current Thread | [Next in Thread] |