[WikiEN-l] Admin account cracker about to be run internally

[doc]

Charlotte Webb wrote:
> On 5/8/07, doc <doc.wikipedia at ntlworld.com> wrote:
>> Seems like overkill. If crats simply ask successful candidates to
>> confirm that they have a compliant password *before* sysopping them,
>> then the problem is solved.
> 
> If they just nod "yes" because they can't be bothered to change their
> passwords to something other than "fuckyou" or "Password1" or
> whatever, we will eventually be right back where we started.
> 
> I don't see how we could put much faith into a security measure that
> is no more sophisticated than "taking their word for it".
> 
> _______________________________________________
> WikiEN-l mailing list
> WikiEN-l at lists.wikimedia.org
> To unsubscribe from this mailing list, visit:
> http://lists.wikimedia.org/mailman/listinfo/wikien-l
> 
We choose admins for their good judgment and trustworthiness. Whilst 
they may be unaware of password potential problems if we can't "take 
their word for it", when directly asked, then they should not be admins.