Bug#657464: libcrack2: Please add check against "The Top 500 Worst Passwords of All Time"

2012-01-27 Thread Fabian Greffrath
Am 27.01.2012 13:38, schrieb Jan Dittberner: thanks for your work. I'll apply your changes soon (today or tomorrow) and will update the upstream cracklib-small file (I'm upstream committer too). Cool. However, please also add the following patterns (they are already included in my previous pat

Bug#657464: libcrack2: Please add check against "The Top 500 Worst Passwords of All Time"

2012-01-27 Thread Jan Dittberner
On Fri, Jan 27, 2012 at 11:01:45AM +0100, Fabian Greffrath wrote: > Dear Jan, > > TL;DR please review the attached debdiff. ;) Hello Fabian, thanks for your work. I'll apply your changes soon (today or tomorrow) and will update the upstream cracklib-small file (I'm upstream committer too). Kin

Bug#657464: libcrack2: Please add check against "The Top 500 Worst Passwords of All Time"

2012-01-27 Thread Fabian Greffrath
Dear Jan, TL;DR please review the attached debdiff. ;) Am 26.01.2012 17:38, schrieb Fabian Greffrath: BTW, is /usr/share/cracklib/cracklib-small considered at all? It gets installed as part of libcrack2, but I do not find it used anywhere. honestly, I think the /usr/share/cracklib/cracklib-sm

Bug#657464: libcrack2: Please add check against "The Top 500 Worst Passwords of All Time"

2012-01-26 Thread Fabian Greffrath
Am 26.01.2012 16:05, schrieb Jan Dittberner: Maybe this bug could be reassigned to wnpp and be formulated as an ITP for a package wknownbadpasswords that Provides: wordlist. Or, since the word list is only 3,5 kB and most probably useless for any other package, you could simply include it in t

Bug#657464: libcrack2: Please add check against "The Top 500 Worst Passwords of All Time"

2012-01-26 Thread Jan Dittberner
On Thu, Jan 26, 2012 at 03:25:11PM +0100, Fabian Greffrath wrote: > Am 26.01.2012 14:48, schrieb Jan Dittberner: > >I think it would be better to have this list as a wordlist package > >instead of bundling it with libcrack2. With this approach the list > >could be updated with no need for a new lib

Bug#657464: libcrack2: Please add check against "The Top 500 Worst Passwords of All Time"

2012-01-26 Thread Fabian Greffrath
Am 26.01.2012 14:48, schrieb Jan Dittberner: I think it would be better to have this list as a wordlist package instead of bundling it with libcrack2. With this approach the list could be updated with no need for a new libcrack2 version. You are right, it would be sufficient to drop the list in

Bug#657464: libcrack2: Please add check against "The Top 500 Worst Passwords of All Time"

2012-01-26 Thread Jan Dittberner
On Thu, Jan 26, 2012 at 01:29:04PM +0100, Fabian Greffrath wrote: > Package: libcrack2 > Version: 2.8.18-3 > Severity: wishlist > Tags: upstream > > Hi, > > I think this is more a wishlist bug addressed at upstream, but anyway: > > There is a list available [1] that contains the 500 worst (i.e.

Bug#657464: libcrack2: Please add check against "The Top 500 Worst Passwords of All Time"

2012-01-26 Thread Fabian Greffrath
Package: libcrack2 Version: 2.8.18-3 Severity: wishlist Tags: upstream Hi, I think this is more a wishlist bug addressed at upstream, but anyway: There is a list available [1] that contains the 500 worst (i.e. most often used) passwords of all time. It contains a lot of obvious ones (and maybe m