RE: Password resets

2009-03-11 Thread Simon Birtwistle
I'm coming to this discussion without much background, so apologies if I am missing something, but from what I gather all you're trying to do is check for active contributors? If so, why not send an email along the following lines instead of requiring password resets? "According to our records yo

Re: Password resets

2009-03-11 Thread Lyos Gemini Norezel
Mike McGrath wrote: I discovered long ago there's no glory in what we do. Gotta fight the good fight just because it's there. There's a truism I wish I'd never heard. It's not my idea of security, it's my idea of a task. I just want some concrete thing that has a begining, middle, and

Re: Password resets

2009-03-11 Thread Mike McGrath
On Wed, 11 Mar 2009, Lyos Gemini Norezel wrote: > Mike McGrath wrote: > > On Wed, 11 Mar 2009, Lyos Gemini Norezel wrote: > > > > > > > Mike McGrath wrote: > > > > > > > I think we shouldn't go too far out of our way for people that can't > > > > follow directions. Harsh? Yes, but what we asked

Re: Password resets

2009-03-11 Thread Lyos Gemini Norezel
Mike McGrath wrote: On Wed, 11 Mar 2009, Lyos Gemini Norezel wrote: Mike McGrath wrote: I think we shouldn't go too far out of our way for people that can't follow directions. Harsh? Yes, but what we asked of people was incredibly trivial. I'd be fine with asking people to log in bu

Re: Password resets

2009-03-11 Thread Mike McGrath
On Wed, 11 Mar 2009, Toshio Kuratomi wrote: > Mike McGrath wrote: > > On Wed, 11 Mar 2009, Lyos Gemini Norezel wrote: > > > >> the proper way)... the only reason for having people login will be > >> immediately > >> obvious via > >> a properly worded email (ie., "Due to inactivity on your FAS acc

Re: Password resets

2009-03-11 Thread Toshio Kuratomi
Mike McGrath wrote: > On Wed, 11 Mar 2009, Lyos Gemini Norezel wrote: > >> the proper way)... the only reason for having people login will be >> immediately >> obvious via >> a properly worded email (ie., "Due to inactivity on your FAS account, your >> account will be >> terminated in 1 month, un

Re: Password resets

2009-03-11 Thread Toshio Kuratomi
Mike McGrath wrote: > On Wed, 11 Mar 2009, Toshio Kuratomi wrote: >> 5. Password resets could be introducing less secure passwords. This >> one's hard for me to quantify. If you use a strong password the first >> time, what's the likelihood that each reset will bring some number of >> users to us

Re: Password resets

2009-03-11 Thread Mike McGrath
On Wed, 11 Mar 2009, Lyos Gemini Norezel wrote: > Mike McGrath wrote: > > I think we shouldn't go too far out of our way for people that can't > > follow directions. Harsh? Yes, but what we asked of people was > > incredibly trivial. I'd be fine with asking people to log in but I'd > > think we

Re: Password resets

2009-03-11 Thread Lyos Gemini Norezel
Mike McGrath wrote: I think we shouldn't go too far out of our way for people that can't follow directions. Harsh? Yes, but what we asked of people was incredibly trivial. I'd be fine with asking people to log in but I'd think we'll find lots of people find that confusing. Logging in and sett

Re: Password resets

2009-03-11 Thread Mike Bonnet
Toshio Kuratomi wrote: > Mike McGrath wrote: >> So holy crap does the planet hate it when you ask people to reset their >> passwords. In particular though, they hated the following: >> >> 1. Kittens >> >> 2. "Password Expiration" is confusing and does not imply "account >> expiration". Some may h

Re: Password resets

2009-03-11 Thread Mike McGrath
On Wed, 11 Mar 2009, Toshio Kuratomi wrote: > > > 5. Password resets could be introducing less secure passwords. This > one's hard for me to quantify. If you use a strong password the first > time, what's the likelihood that each reset will bring some number of > users to use an insecure password

Re: Password resets

2009-03-11 Thread Toshio Kuratomi
Mike McGrath wrote: > So holy crap does the planet hate it when you ask people to reset their > passwords. In particular though, they hated the following: > > 1. Kittens > > 2. "Password Expiration" is confusing and does not imply "account > expiration". Some may have ignored the warning becaus

Re: Password resets

2009-03-11 Thread Stephen John Smoogen
On Tue, Mar 10, 2009 at 7:41 PM, Mike McGrath wrote: > So holy crap does the planet hate it when you ask people to reset their > passwords.  In particular though, they hated the following: > > 1. Kittens Personally I thought people were having kittens for all the 'problems' occurring. Maybe we sh

Re: Password resets

2009-03-10 Thread Ian Weller
On Tue, Mar 10, 2009 at 08:41:33PM -0500, Mike McGrath wrote: > So holy crap does the planet hate it when you ask people to reset their > passwords. In particular though, they hated the following: > > 1. Kittens > > 2. "Password Expiration" is confusing and does not imply "account > expiration".