I raise you "correct horse battery staple" and all his friends. https://xkcd.com/936/

Quote:
Through 20 years of effort, we've successfully trained everyone to use passwords that are hard for humans to remember, but easy for computers to guess.

I'm afraid all the proposed rules on T94774 fall into the same mould. The approach of mandating a certain number of characters in each set, rather than an entropy-based approach, forces users to create passwords that they can't remember but isn't much harder for a machine to crack by brute-force. And how are the rules gonna be implemented if someone uses non-ASCII characters? I worry that this switch actually forces some users to switch to less secure passwords because their current passwords are high-entropy but don't contain the requisite set of characters.

Deryck

[T94774]: https://phabricator.wikimedia.org/T94774

On 29 June 2015 at 16:58, Guillaume Paumier <gpaumier@wikimedia.org> wrote:
Hi,

The latest technical newsletter is now available at https://meta.wikimedia.org/wiki/Special:MyLanguage/Tech/News/2015/27 . Below is the English version.

You can help write the next newsletter: whenever you see information about Wikimedia technology that you think should be distributed more broadly, you can add it to the next newsletter at https://meta.wikimedia.org/wiki/Tech/News/Next.

More information on how to contribute is available at https://meta.wikimedia.org/wiki/Tech/News#contribute . You can also contact me directly.

As always, feedback (on- or off-list) is appreciated and encouraged.

—————————————————————————————

Other languages:
čeština • ‎English • ‎español • ‎suomi • ‎français • ‎עברית • ‎italiano • ‎日本語 • ‎Ripoarisch • ‎português • ‎português do Brasil • ‎русский • ‎українська • ‎Tiếng Việt • ‎中文

Latest tech news from the Wikimedia technical community. Please tell other users about these changes. Not all changes will affect you. Translations are available.

Recent changes

  • Long lines in code blocks now look better. [1]
  • You can now see graphs in VisualEditor. [2]
  • When you read a page on the mobile site, you can now see a link to go to its talk page. [3]
  • The code coloring tool has changed. You can now use many more languages. It now also works on mobile. [4] [5] [6]
  • You can look at a new site to learn how to reuse data from Wikimedia sites. [7]

Problems

  • JavaScript was broken on some wikis due to a code error. VisualEditor and other tools that use JavaScript were broken. [8]

Changes this week

  • The new version of MediaWiki will be on test wikis and MediaWiki.org from June 30. It will be on non-Wikipedia wikis from July 1. It will be on all Wikipedias from July 2 (calendar).
  • You can now use a tool in VisualEditor to add and edit code in color. [9]
  • When you edit a sentence in the Translate tool, it can show you older translations. They help you save time if they look alike. The older translations should now work better. If you see problems, you should report them. [10]
  • If you are an admin or have other special rights, you now need a strong password. [11]
  • Bot and JavaScript coders: The old continuation mode of the API for action=query doesn't work any more. [12]

Meetings

  • You can join the next meeting with the Editing team. During the meeting, you can tell developers which bugs are the most important. The meeting will be on June 30 at 19:00 (UTC). See how to join.

Future

  • When you create a new account, it will also create one on Meta-Wiki and mediawiki.org[13]

Tech news prepared by tech ambassadors and posted by bot • Contribute • Translate • Get help • Give feedback • Subscribe or unsubscribe.


--
Guillaume Paumier

_______________________________________________
Wikitech-ambassadors mailing list
Wikitech-ambassadors@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-ambassadors