4 ms·
Tchap isn’t a disaster at all. There was one auth bug (thanks to a bug in python’s email validator) which meant that signup wasn’t locked to @gouv.fr email addr
by Arathorn 4y ago
Tchap isn’t a disaster at all. There was one auth bug (thanks to a bug in python’s email validator) which meant that signup wasn’t locked to @gouv.fr email addresses, exposing public chatrooms, which was fixed within about 4h of being reported - before the service was launched.
- antisocialist 4y agoI just checked their Web sign-up page at https://www.tchap.gouv.fr/#/register https://www.tchap.gouv.fr/#/register: "This password is too weak. It must include a lower-case letter, an upper-case letter, a number and a symbol and be at a minimum 8 characters in length." If eight chars is the minimum, guess how complex and secure are most of Tchat users' passwords :-)).