RE: Password resets

2009-03-11 Thread Simon Birtwistle
I'm coming to this discussion without much background, so apologies if I am missing something, but from what I gather all you're trying to do is check for active contributors? If so, why not send an email along the following lines instead of requiring password resets? "According

Re: Password resets

2009-03-11 Thread Lyos Gemini Norezel
Mike McGrath wrote: I discovered long ago there's no glory in what we do. Gotta fight the good fight just because it's there. There's a truism I wish I'd never heard. It's not my idea of security, it's my idea of a task. I just want some concrete thing that has a begining, middle, and

Re: Password resets

2009-03-11 Thread Mike McGrath
On Wed, 11 Mar 2009, Lyos Gemini Norezel wrote: > Mike McGrath wrote: > > On Wed, 11 Mar 2009, Lyos Gemini Norezel wrote: > > > > > > > Mike McGrath wrote: > > > > > > > I think we shouldn't go too far out of our way for people that can't > > > > follow directions. Harsh? Yes, but what we asked

Re: Password resets

2009-03-11 Thread Lyos Gemini Norezel
Mike McGrath wrote: On Wed, 11 Mar 2009, Lyos Gemini Norezel wrote: Mike McGrath wrote: I think we shouldn't go too far out of our way for people that can't follow directions. Harsh? Yes, but what we asked of people was incredibly trivial. I'd be fine with asking people to log in bu

Re: Password resets

2009-03-11 Thread Mike McGrath
t; > system and people rarely use it without being asked to so we'll still have > > to do some emailing. > > > That's actually only sort of true. People don't use FAS often... but > they do logon to FAS whenever they lo

Re: Password resets

2009-03-11 Thread Toshio Kuratomi
Mike McGrath wrote: > On Wed, 11 Mar 2009, Lyos Gemini Norezel wrote: > >> the proper way)... the only reason for having people login will be >> immediately >> obvious via >> a properly worded email (ie., "Due to inactivity on your FAS account, your >> account will be >> terminated in 1 month, un

Re: Password resets

2009-03-11 Thread Toshio Kuratomi
Mike McGrath wrote: > On Wed, 11 Mar 2009, Toshio Kuratomi wrote: >> 5. Password resets could be introducing less secure passwords. This >> one's hard for me to quantify. If you use a strong password the first >> time, what's the likelihood that each reset will b

Re: Password resets

2009-03-11 Thread Mike McGrath
On Wed, 11 Mar 2009, Lyos Gemini Norezel wrote: > Mike McGrath wrote: > > I think we shouldn't go too far out of our way for people that can't > > follow directions. Harsh? Yes, but what we asked of people was > > incredibly trivial. I'd be fine with asking people to log in but I'd > > think we

Re: Password resets

2009-03-11 Thread Lyos Gemini Norezel
Mike McGrath wrote: I think we shouldn't go too far out of our way for people that can't follow directions. Harsh? Yes, but what we asked of people was incredibly trivial. I'd be fine with asking people to log in but I'd think we'll find lots of people find that confusing. Logging in and sett

Re: Password resets

2009-03-11 Thread Mike Bonnet
>> 4. fedorapeople space going away and not coming back automatically. > > Possible implementation here: > https://fedorahosted.org/fedora-infrastructure/ticket/1244#comment:1 > > 5. Password resets could be introducing less secure passwords. This > one's hard fo

Re: Password resets

2009-03-11 Thread Mike McGrath
On Wed, 11 Mar 2009, Toshio Kuratomi wrote: > > > 5. Password resets could be introducing less secure passwords. This > one's hard for me to quantify. If you use a strong password the first > time, what's the likelihood that each reset will bring some number of &

Re: Password resets

2009-03-11 Thread Toshio Kuratomi
. Possible implementation here: https://fedorahosted.org/fedora-infrastructure/ticket/1244#comment:1 > 5. Password resets could be introducing less secure passwords. This one's hard for me to quantify. If you use a strong password the first time, what's the likelihood that each r

Re: Password resets

2009-03-11 Thread Stephen John Smoogen
On Tue, Mar 10, 2009 at 7:41 PM, Mike McGrath wrote: > So holy crap does the planet hate it when you ask people to reset their > passwords.  In particular though, they hated the following: > > 1. Kittens Personally I thought people were having kittens for all the 'problems' occurring. Maybe we sh

Re: Password resets

2009-03-10 Thread Ian Weller
On Tue, Mar 10, 2009 at 08:41:33PM -0500, Mike McGrath wrote: > So holy crap does the planet hate it when you ask people to reset their > passwords. In particular though, they hated the following: > > 1. Kittens > > 2. "Password Expiration" is confusing and does not imply "account > expiration".

Password resets

2009-03-10 Thread Mike McGrath
So holy crap does the planet hate it when you ask people to reset their passwords. In particular though, they hated the following: 1. Kittens 2. "Password Expiration" is confusing and does not imply "account expiration". Some may have ignored the warning because they did not understand what the