Re: Re: Do you trim() usernames and passwords?
| From: | Tamara Temple | Date: | Fri, 31 Dec 2010 06:31:05 +0000 |
| Subject: | Re: Re: Do you trim() usernames and passwords? | ||
| References: | 1 2 3 4 5 6 7 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-310407@lists.php.net to get a copy of this message | ||
On Dec 28, 2010, at 10:28 PM, Joshua Kehn wrote:
On Dec 28, 2010, at 6:28 PM, Paul M Foster wrote:20? child's play. How about 250+ randomly generated passwords and username combinations?On Tue, Dec 28, 2010 at 03:11:56PM -0500, Joshua Kehn wrote:What is "wrong?" That users should not be copy-pasting passwords or don't compromise the system? I agree that users should not use weak passwords, but not everyone goes everywhere with a vault. I am more then capable of memorizing 20 or so 16-32 character full set passwords.Specifically:Wrong. I use a program called pwgen to generate passwords for me, which I cannot remember. I use another program I built to store them in an encrypted file. When I have to supply a password which I've forgotten (as usual), I fire up my password "vault", find the password, and paste it wherever it's needed. Users would be wise to follow a scheme like this, rather than using their dog's name or somesuch as their passwords. Paul --Paul M. Foster http://noferblatz.comUsers should not be copy-pasting passwords or usernames. Do not compromise a system to cater to bad [stupid, ignorant, you pick] users. If this is an issue then educate the users.Dotan Cohen wrote:I seem to have an issue with users who copy-paste their usernames and passwords coping and pasting leading and trailing space characters.