[Foundation-l] Re: [Wikipedia-l] Re: [Wikitech-l] Password security

[Brion Vibber]

Tomasz Wegrzanowski wrote:
> So, while dictionary-checking sysops' passwords make a lot of sense,
> there's very little point in limiting passwords of the non-privileged accounts.

At the moment we don't have a separate switch for sysops, nor any control which
would prevent blank-password accounts from being made into sysops. I'd rather
risk disabling a few accounts temporarily than keep the incredibly dangerous
sysop accounts open (which could be used potenially to great destructive effect).

-- brion vibber (brion @ pobox.com)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 249 bytes
Desc: OpenPGP digital signature
Url : http://lists.wikimedia.org/pipermail/foundation-l/attachments/20060130/8bc6b7ba/attachment-0001.pgp