Re: [Savannah-users] password must contain multiple character classes...

2013-05-05 Thread jidanni
> "I" == Ineiev writes: I> when they are long enough (24 bytes or longer); Man, you guys are the BDSM of password lords...

Re: [Savannah-users] password must contain multiple character classes...

2013-05-05 Thread Ineiev
On 05/06/2013 09:48 AM, Bob Proulx wrote: Dan (jidanni) the original poster isn't subscribed. He didn't ask to be CC'd so we haven't been doing so. Would you write him and let him know that you improved things for him? Done. I have no idea on how to push the commit yet; it looks like it is

Re: [Savannah-users] password must contain multiple character classes...

2013-05-05 Thread Bob Proulx
Ineiev wrote: > I've just installed the changes on frontend.sv.gnu.org and checked > that they work; Thank you for doing that update. That is great that this behavior has been improved. Dan (jidanni) the original poster isn't subscribed. He didn't ask to be CC'd so we haven't been doing so. Wo

Re: [Savannah-users] password must contain multiple character classes...

2013-05-04 Thread Ineiev
On 05/03/2013 09:49 PM, Bob Proulx wrote: Over time there have been many committers. Notably Sylvain has the majority for a long time. Most recently Michael has the majority of commits. I've just installed the changes on frontend.sv.gnu.org and checked that they work; I have no idea on how to

Re: [Savannah-users] password must contain multiple character classes...

2013-05-03 Thread Bob Proulx
Ineiev wrote: > The latest committer must know, unless the effort was abandoned. Looking at the log history I see that they were the same project until 2009 when they were forked. Since that time there has been a long history of merges from savane-cleanup to administration/savane. It appears tha

Re: [Savannah-users] password must contain multiple character classes...

2013-05-03 Thread Ineiev
On 05/02/2013 11:10 PM, Bob Proulx wrote: > There weren't any differences between the two repositories concerning > the files for which you have proposed changes. So everything you > propose applies equally to either. But it seems to me that the > repository that needs your modifications is admi

Re: [Savannah-users] password must contain multiple character classes...

2013-05-02 Thread Bob Proulx
Ineiev wrote: > It looks like the relevant files are > frontend.sv.gnu.org:/var/www/savane/frontend/php/include/init.php > frontend.sv.gnu.org:/var/www/savane/frontend/php/include/account.php > (the repository being GIT of > http://savannah.gnu.org/projects/savane-cleanup). +1. I agree. Those pr

Re: [Savannah-users] password must contain multiple character classes...

2013-05-02 Thread Karl Berry
frontend.sv.gnu.org:/var/www/savane/frontend/php/include/init.php frontend.sv.gnu.org:/var/www/savane/frontend/php/include/account.php (the repository being GIT of http://savannah.gnu.org/projects/savane-cleanup). Thanks very much, Ineiev. I fully agree with your proposed changes.

Re: [Savannah-users] password must contain multiple character classes...

2013-05-02 Thread Ineiev
Hello, It looks like the relevant files are frontend.sv.gnu.org:/var/www/savane/frontend/php/include/init.php frontend.sv.gnu.org:/var/www/savane/frontend/php/include/account.php (the repository being GIT of http://savannah.gnu.org/projects/savane-cleanup). Currently it uses default pwqcheck opt

Re: [Savannah-users] password must contain multiple character classes...

2013-04-22 Thread Jordi GutiƩrrez Hermoso
On 22 April 2013 10:50, Ineiev wrote: > On 04/05/2013 09:49 PM, Karl Berry wrote: >> >> We are all agreed that the current savannah password requirement is >> suboptimal, so there's no point in continuing to argue about it, there's >> no one left to convince. What's needed, as always with savanna

Re: [Savannah-users] password must contain multiple character classes...

2013-04-22 Thread Ineiev
On 04/05/2013 09:49 PM, Karl Berry wrote: We are all agreed that the current savannah password requirement is suboptimal, so there's no point in continuing to argue about it, there's no one left to convince. What's needed, as always with savannah, is a person to volunteer to figure out how to ac

Re: [Savannah-users] password must contain multiple character classes...

2013-04-05 Thread Jordi GutiƩrrez Hermoso
Guys, we know the Savannah passwords are dumb. But unless someone hacks Savannah, they'll remain dumb. - Jordi G. H.

Re: [Savannah-users] password must contain multiple character classes...

2013-04-05 Thread Karl Berry
We are all agreed that the current savannah password requirement is suboptimal, so there's no point in continuing to argue about it, there's no one left to convince. What's needed, as always with savannah, is a person to volunteer to figure out how to actually change it and do the work. karl

Re: [Savannah-users] password must contain multiple character classes...

2013-04-04 Thread Bob Proulx
Kaz Kylheku wrote: > Miles Bader wrote: > > k...@freefriends.org (Karl Berry) writes: > >> How is your password "much" better? Using non-alphanumeric > >> characters? I thought they were allowed even though the message > >> doesn't mention them. The whole concept of a favorite password bothered

Re: [Savannah-users] password must contain multiple character classes...

2013-04-04 Thread Kaz Kylheku
On Fri, 05 Apr 2013 11:46:32 +0900, Miles Bader wrote: > k...@freefriends.org (Karl Berry) writes: >> How is your password "much" better? Using non-alphanumeric >> characters? I thought they were allowed even though the message >> doesn't mention them. > > I think there's a pretty general cons

Re: [Savannah-users] password must contain multiple character classes...

2013-04-04 Thread Miles Bader
k...@freefriends.org (Karl Berry) writes: > How is your password "much" better? Using non-alphanumeric > characters? I thought they were allowed even though the message > doesn't mention them. I think there's a pretty general consensus by now that this sort of requirement ("must contain a digit

Re: [Savannah-users] password must contain multiple character classes...

2013-03-29 Thread jidanni
> "KB" == Karl Berry writes: KB> How is your password "much" better? Using non-alphanumeric characters? KB> I thought they were allowed even though the message doesn't mention KB> them. Not it doesn't. But me and those big websites think it is great. Anyway, just keep the lost password page

Re: [Savannah-users] password must contain multiple character classes...

2013-03-29 Thread Karl Berry
password must contain multiple character classes... I think there is general agreement that the current password requirement is not ideal. Savannah needs additional volunteers who can help with back-end administration and hack on things like this. Until that happens, it's not likely anything

[Savannah-users] password must contain multiple character classes...

2013-03-29 Thread jidanni
Cc: ri...@csl.sri.com I have just encountered the most clodsworthy... Lost Password Login https://savannah.gnu.org/ Welcome, jidanni. You may now change your password. New password / passphrase: (not too short, must contain multiple character classes: symbols, digits (0-9), upper and lower case le