mainSavannah Administration - Support: sr #108600, Registration b0rked

 
 

sr #108600: Registration b0rked

Submitter:  None
Submitted:  Sat 14 Jun 2014 02:47:58 AM UTC
   
 
Category:  None Priority:  5 - Normal
Severity:  3 - Normal Status:  Postponed
Privacy:  Public Assigned to:  None
Originator Email:  -email is unavailable- Operating System:  None
Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Jump to the original submission

Sat 18 Feb 2017 01:41:59 AM UTC, comment #6: 

(triaging old savannah tickets)

Hello,

Regarding this:

> Password requirements are far too complicated to figure out
> and pointless for something such as project hosting.


This is an important issue. Perhaps not relaxing the requirements,
but certainly making the page more friendly and the error messages
more helpful.

Sadly, we currently do not have the man-power to implement it (and evidently, didn't have it in the last 3 years since this ticket was opened).

I'm adding this idea to savannah's "todo/wishlist" page (#24):
  http://savannah.gnu.org/maintenance/SavannahHackingIdeas/

On the bright-side, we've just made hacking on savannah's PHP code much easier.
If you (or others) wish to help, please see:
  https://lists.gnu.org/archive/html/savannah-hackers-public/2017-02/msg00085.html

As such, I'm closing this ticket for now.

regards,
 - assaf


Assaf Gordon <agn>
Site Administrator
Fri 27 Jun 2014 12:16:08 PM UTC, comment #5: 

I think that the requirement on passwd are good.
May be we could just explain how to craft a password fullfilling the requirements which does not imply a headache.


My usual favorite being to use the initial letter for each word of a phrase (possibly long) an replace 'to' with '2'  or drop a '+' or '-' as separator and drop in some number of space for punctuation.

This usually fullfil most of "strong" passwd requirement and do not require a lot for remembering it.

Moroever if the passwd recovery process is efficient forgetting a passwd is not that bad. I'm speaking of passwd for the average project user not for sys admin of course.

Then my opinion is:

Keep strong requirement on passwd.
Give more advice about two 'create' strong passwd to the user.

Eric NOULARD <erk>
Thu 26 Jun 2014 06:49:46 AM UTC, comment #4: 
Anonymous
Thu 26 Jun 2014 06:43:39 AM UTC, comment #3: 

The password I was choosing should be plenty strong for this.
As far as the admins go, why not make them have more stringent requirements but reasonable requirements for normal users?

I strongly dislike how paranoid many Unix users/advocates are about security. My memory is quite poor so remembering complex passwords is next to impossible especially for sites I would rarely log in to. My only other option is to use a password manager (which is insecure)

Anonymous
Wed 25 Jun 2014 11:16:31 AM UTC, comment #2: 

Whenever using services across the Internet, password requirements are anything but pointless. Especially here on Savannah, not only can a password leak breach your own account, but if this occurs to an administrator who has a weak password, it can also jeopardize the entire system.

The error messages returned could be slightly more informative, but it does not excuse bad password habits.

Caleb Xu <alebcay>
Wed 18 Jun 2014 09:44:40 PM UTC, comment #1: 

Password requirements are far too complicated to figure out
and pointless for something such as project hosting.

Rather then all the complication you should just put something obvious for normal people to figure out like an 8 character minimum

Anonymous
Sat 14 Jun 2014 02:47:58 AM UTC, original submission:  

https://savannah.nongnu.org/account/register.php

"Bad passphrase (not enough different characters or classes for this length) Warning: Savane was not able to read "" site-specific information, please contact administrators"

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by agn (Posted a comment)
  • -email is unavailable- added by erk (Posted a comment)
  • -email is unavailable- added by alebcay (Posted a comment)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2017-02-18 agn StatusNone Postponed
        Open/ClosedOpen Closed

    Back to the top

    Powered by Savane 3.13-4448.
    Corresponding source code