Menu

#1292 password policy bias

v1.0_(example)
closed
nobody
None
1
2017-06-03
2015-10-25
Sami Farin
No

Password length: 64
☑ Use digits
☑ Use symbols
ä

example generated passwords:

172ää2ä6ä1ä76ää5ä0ääää9ä53ää8ää5ä4ä6ääää660977ä5ä8ä494ä43ääää556
ääää5ää2ä98ää0990äääää3780ä4ä5470ääää76ä7ä61äää8ä25ä79ä2ääääää8ä

expected number of ä chars: 1/11, not 32/64

Discussion

  • Sami Farin

    Sami Farin - 2015-12-15

    fixed in lumimaja by just concatenating selected classes into one string, then selecting
    one char from the string in GetRandomChar()

     
  • Rony Shapiro

    Rony Shapiro - 2015-12-16

    Cool - I'll look at your fix there, and "borrow" it with your permission....

     
  • Sami Farin

    Sami Farin - 2015-12-16

    I removed the feature of requiring min number of chars per class (e.g. at least 1 uppercase).
    If password is sufficiently long, that check is not needed, but to appease certain web sites it could try to generate new password in a loop till it gets one which has at least one alphabetical char and one digit (but only if user has selected those classes).

     
  • Rony Shapiro

    Rony Shapiro - 2017-06-03
    • status: open --> closed
     
  • Rony Shapiro

    Rony Shapiro - 2017-06-03

    Fixed in 3.42

     

Log in to post a comment.

MongoDB Logo MongoDB