Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.python > #77212

Re: PyPI password rules

Path csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!newsfeed.xs4all.nl!newsfeed2a.news.xs4all.nl!xs4all!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail
Return-Path <skip.montanaro@gmail.com>
X-Original-To python-list@python.org
Delivered-To python-list@mail.python.org
X-Spam-Status OK 0.021
X-Spam-Evidence '*H*': 0.96; '*S*': 0.00; 'subject:password': 0.05; 'subject:PyPI': 0.09; 'cc:addr:python-list': 0.11; 'from:addr:pobox.com': 0.16; 'from:addr:skip': 0.16; 'sender:addr:gmail.com': 0.17; 'wrote:': 0.18; 'thu,': 0.19; '(in': 0.22; 'aug': 0.22; 'cc:addr:python.org': 0.22; 'skip': 0.24; 'cc:2**0': 0.24; 'header:In-Reply-To:1': 0.27; 'am,': 0.29; 'thus': 0.29; 'message-id:@mail.gmail.com': 0.30; 'high.': 0.31; 'lists': 0.32; 'sources': 0.33; 'common': 0.35; 'received:google.com': 0.35; 'words,': 0.36; 'being': 0.38; 'skip:& 10': 0.38; 'mailing': 0.39; 'more': 0.64; 'ethan': 0.84; 'furman': 0.84
DKIM-Signature v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=o2Zzc1nyzNf9iNMM4HhtNKiASfvqKZT83V8CBr5y56s=; b=0khF3PrcrfXBcy72meikaIkir/CNWDa/VaQdeWzzaTwgzML2A5vAuSrb1lLJ4/fwsg d63T1eBNhj91ThDYNFn3VXglnoSNT7Rjs+8qKRSrNKV3R79UiEmsYzJ/00593tTwOi76 2futPvUZ/ZnjlbFc7AddyB+3fk9ecm5o7Lee+haVvfZEX5IwcDgT8mucnCKUQmyp/NKx 8S4j5jIXUP7uayD8bb0IIvRtdVwmVv2slMbjnpSTocTM6qHYuERNFTiELHf0c3relVyd N/zj7VQiGHT3u/C07hctYoyoh26UCW+Sw7Qg1pI/60MebMsN8EiM/zIdaQ7GIXeqj8DA Locg==
MIME-Version 1.0
X-Received by 10.42.227.10 with SMTP id iy10mr4966189icb.3.1409237271714; Thu, 28 Aug 2014 07:47:51 -0700 (PDT)
Sender skip.montanaro@gmail.com
In-Reply-To <53FF3ACE.2040605@stoneleaf.us>
References <CAPTjJmo9W42iRTm=Ro7aP0m1sk4QF7uK3U-UsunZ5VD6DFspQg@mail.gmail.com> <CANc-5UyntLBKUy7JAGoA-sU_V84AMfwfBMfvZtS-GGKtaAM8ZA@mail.gmail.com> <CAPTjJmrQi+E-SzBW8E4NmoZFJDWTO5Xwqca=wMwyw55WFt89iQ@mail.gmail.com> <CANc-5UxRtz_RMo7ex0Bc0wnCwXACZi7iE1NPYuO8rwNHO3oH6w@mail.gmail.com> <CAPTjJmpg9QPTOytus8-Ls9MBHz41oEYd4KbZwkDVh2AWQ8CSrA@mail.gmail.com> <CANc-5Uzpo9YjZH9FSUEC9bF6YvZ=4QkDUXJRfg+W8RvR4PfM_A@mail.gmail.com> <CANc-5Uywe+36K0XQeULNz98KDBQqUHtQWQoUC4MgprrZRvshaA@mail.gmail.com> <CANc-5Uw_sMMCFWpSbfv6r61-tVFf4qsy3r17yG6otRtf2KFv2Q@mail.gmail.com> <CAPTjJmrUK4ohh98jWcHeuh=RKq-5dNSD-PiFFMvthwV7xAYnhg@mail.gmail.com> <53FF3ACE.2040605@stoneleaf.us>
Date Thu, 28 Aug 2014 09:47:51 -0500
X-Google-Sender-Auth Zz09-zyVxEWmVEOlXNv6OEf4dY4
Subject Re: PyPI password rules
From Skip Montanaro <skip@pobox.com>
To Ethan Furman <ethan@stoneleaf.us>
Content-Type multipart/alternative; boundary=001a11c3e50efc21150501b19e6f
Cc Python <python-list@python.org>
X-BeenThere python-list@python.org
X-Mailman-Version 2.1.15
Precedence list
List-Id General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe <https://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive <http://mail.python.org/pipermail/python-list/>
List-Post <mailto:python-list@python.org>
List-Help <mailto:python-list-request@python.org?subject=help>
List-Subscribe <https://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups comp.lang.python
Message-ID <mailman.13563.1409237280.18130.python-list@python.org> (permalink)
Lines 37
NNTP-Posting-Host 2001:888:2000:d::a6
X-Trace 1409237280 news.xs4all.nl 2935 [2001:888:2000:d::a6]:50694
X-Complaints-To abuse@xs4all.nl
Xref csiph.com comp.lang.python:77212

Show key headers only | View raw


[Multipart message — attachments visible in raw view] - view raw

On Thu, Aug 28, 2014 at 9:21 AM, Ethan Furman <ethan@stoneleaf.us> wrote:

> What's the value in ruling out less common words?  I would think the more
> the merrier!


I think less common "words" are likely to actually not be words, just
misspellings of other words, and thus harder for the user to remember. More
cruft to ignore/eliminate. The sources for the corpus being (in my case)
public mailing lists or (in Chris's case) D&D chatter, the likelihood of
misspellings is pretty high.

Skip

Back to comp.lang.python | Previous | Next | Find similar | Unroll thread


Thread

Re: PyPI password rules Skip Montanaro <skip@pobox.com> - 2014-08-28 09:47 -0500

csiph-web