4 ms·
Hmmm... Using the UNIX word list for password resets may lead to passwords like "oversexed#asshole". May not be the best password to send to your users. I woul
by lucumo 18y ago
Hmmm... Using the UNIX word list for password resets may lead to passwords like "oversexed#asshole". May not be the best password to send to your users.
I would suggest trimming the wordlist before use, if you plan to use it for handing out passwords.
- stephencelis 18y agoYeah. I addressed that in the post. The odds are low, though, and come on, most users would have a good laugh ;)
- endtime 18y agoThe odds are low, though, and come on, most users would have a good laugh ;) Not very reassuing to anyone with a business. It wouldn't be hard to filter potentially offensive passwords, especially given that false positives don't matter.
- stephencelis 18y agoI suppose I should provide more warning in the documentation itself. It is an easily resolvable issue, though, as you point out.
- aristus 18y agoNope. There is no such thing as an average sense of humor. At a company I worked for we got a lot of crap for sending out passwords like "invisible*negro" and "murdered#pakistani". The odds are not as low as you think. Hell, we got crap for adding the tags "Russian" and "Jew" to people who were, in fact, from Russia and Jewish.
- stephencelis 18y agoAgh! Good point! Some kind of regex should definitely be included.