Re: PyPI password rules

References	(6 earlier) <CANc-5Uywe+36K0XQeULNz98KDBQqUHtQWQoUC4MgprrZRvshaA@mail.gmail.com> <CANc-5Uw_sMMCFWpSbfv6r61-tVFf4qsy3r17yG6otRtf2KFv2Q@mail.gmail.com> <CAPTjJmrUK4ohh98jWcHeuh=RKq-5dNSD-PiFFMvthwV7xAYnhg@mail.gmail.com> <CANc-5Uww_rT0fCY-PiHVZ7CfZ-cn=qgDtWvCfmdw_TpSixR+cQ@mail.gmail.com> <CAPTjJmqg968SLy4ozduegj7hdi6Ox+WKmeSf6P5cc4bvoes4Kg@mail.gmail.com>
Date	2014-08-28 00:38 -0500
Subject	Re: PyPI password rules
From	Skip Montanaro <skip@pobox.com>
Newsgroups	comp.lang.python
Message-ID	<mailman.13541.1409204287.18130.python-list@python.org> (permalink)

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Thu, Aug 28, 2014 at 12:08 AM, Chris Angelico <rosuav@gmail.com> wrote:

> Interesting. I suspect this may have issues, as you're doing these
> checks progressively; something that's common in the early posts will
> be weighted without regard to subsequent posts (you're requiring 100
> unique words before recording anything, but that's still not all that
> many).
>

I'm not really that worried about it. The number of words and their counts
grows rapidly, so the risk of choosing "common" words which aren't actually
used much is small. If it was a problem, I do have the word frequencies
available. I could simply sort by the counts and choose the 2**N most
frequently occurring words, then toss out "bad" words before generating
passwords.

Skip

Back to comp.lang.python | Previous | Next | Find similar | Unroll thread

Thread

Re: PyPI password rules Skip Montanaro <skip@pobox.com> - 2014-08-28 00:38 -0500

csiph-web