Re: PyPI password rules

2014-08-28 Thread Skip Montanaro
On Thu, Aug 28, 2014 at 9:21 AM, Ethan Furman wrote: > What's the value in ruling out less common words? I would think the more > the merrier! I think less common "words" are likely to actually not be words, just misspellings of other words, and thus harder for the user to remember. More cruft

Re: PyPI password rules

2014-08-28 Thread Chris Angelico
On Fri, Aug 29, 2014 at 12:21 AM, Ethan Furman wrote: > On 08/27/2014 08:32 PM, Chris Angelico wrote: >> >> >> I'm not sure I understand how your 'common' value works, though. Does >> the default 0.6 mean you take the 60% most common words? Those above >> the 60th percentile of frequency? Somethin

Re: PyPI password rules

2014-08-28 Thread Ethan Furman
On 08/27/2014 08:32 PM, Chris Angelico wrote: I'm not sure I understand how your 'common' value works, though. Does the default 0.6 mean you take the 60% most common words? Those above the 60th percentile of frequency? Something else? What's the value in ruling out less common words? I would

Re: PyPI password rules

2014-08-28 Thread Skip Montanaro
On Wed, Aug 27, 2014 at 11:28 PM, Skip Montanaro wrote: > Hmmm... I realize now that I'm not seeing all messages, at least I don't > think so. So much to learn about IMAP... I peeked at the code for the SpamBayes IMAP filter. Holy smokes! I think the IMAP RFC authors might have been sadists...

Re: PyPI password rules

2014-08-27 Thread Skip Montanaro
On Thu, Aug 28, 2014 at 12:08 AM, Chris Angelico wrote: > Interesting. I suspect this may have issues, as you're doing these > checks progressively; something that's common in the early posts will > be weighted without regard to subsequent posts (you're requiring 100 > unique words before recordi

Re: PyPI password rules

2014-08-27 Thread Chris Angelico
On Thu, Aug 28, 2014 at 2:28 PM, Skip Montanaro wrote: > > On Wed, Aug 27, 2014 at 10:32 PM, Chris Angelico wrote: >> >> I'm not sure I understand how your 'common' value works, though. Does >> the default 0.6 mean you take the 60% most common words? Those above >> the 60th percentile of frequenc

Re: PyPI password rules

2014-08-27 Thread Skip Montanaro
On Wed, Aug 27, 2014 at 10:32 PM, Chris Angelico wrote: > I'm not sure I understand how your 'common' value works, though. Does > the default 0.6 mean you take the 60% most common words? Those above > the 60th percentile of frequency? Something else? > Yes, basically. A word has to pass the foll

Re: PyPI password rules

2014-08-27 Thread Chris Angelico
On Thu, Aug 28, 2014 at 12:53 PM, Skip Montanaro wrote: > On Wed, Aug 27, 2014 at 9:23 AM, Skip Montanaro wrote: >> >> I should have something to show the world in a day or two. > > > Here's my first crack at it. > > https://github.com/smontanaro/polly > > Thanks to Chris for the idea and the nam

Re: PyPI password rules

2014-08-27 Thread Skip Montanaro
On Wed, Aug 27, 2014 at 9:23 AM, Skip Montanaro wrote: > I should have something to show the world in a day or two. Here's my first crack at it. https://github.com/smontanaro/polly Thanks to Chris for the idea and the name. The README.md file should have enough to get started. Basically thou

Re: PyPI password rules

2014-08-27 Thread Skip Montanaro
On Tue, Aug 26, 2014 at 11:05 AM, Skip Montanaro wrote: > I guess I could write a little program that listens to my incoming > email via IMAP. I'll have to see what that generates. Lots of Python > and bike references, no doubt. I should have something to show the world in a day or two. I have a

Re: PyPI password rules

2014-08-26 Thread Gregory Ewing
Chris Angelico wrote: And you wouldn't be generating passwords like "videocard begat browser fetches", which just came up as I was playing around now. Arg! Video card makers are putting spyware in them now?! -- Greg -- https://mail.python.org/mailman/listinfo/python-list

Re: PyPI password rules

2014-08-26 Thread Chris Angelico
On Wed, Aug 27, 2014 at 2:05 AM, Skip Montanaro wrote: > On Tue, Aug 26, 2014 at 10:52 AM, Chris Angelico wrote: >> Most of what Polly hears is fairly general chatter. There are a few >> jargon terms like "metamagic" that are D&D-specific, but apart from >> that, it's straight English. > > I gues

Re: PyPI password rules

2014-08-26 Thread Skip Montanaro
On Tue, Aug 26, 2014 at 10:52 AM, Chris Angelico wrote: > Most of what Polly hears is fairly general chatter. There are a few > jargon terms like "metamagic" that are D&D-specific, but apart from > that, it's straight English. I guess I could write a little program that listens to my incoming ema

Re: PyPI password rules

2014-08-26 Thread Chris Angelico
On Wed, Aug 27, 2014 at 1:48 AM, Skip Montanaro wrote: > On Tue, Aug 26, 2014 at 9:02 AM, Chris Angelico wrote: >> On my Dungeons & Dragons server, in the common room, I have a parrot >> named Polly. She listens to everything people say,... > > Ah, okay. Nice approach. Not a D&D player, so I'll s

Re: PyPI password rules

2014-08-26 Thread Skip Montanaro
On Tue, Aug 26, 2014 at 9:02 AM, Chris Angelico wrote: > On my Dungeons & Dragons server, in the common room, I have a parrot > named Polly. She listens to everything people say,... Ah, okay. Nice approach. Not a D&D player, so I'll stick with my common words for now, until and unless I come up w

Re: PyPI password rules

2014-08-26 Thread Chris Angelico
On Tue, Aug 26, 2014 at 11:28 PM, Skip Montanaro wrote: > On Tue, Aug 26, 2014 at 1:16 AM, Chris Angelico wrote: >> Currently, her full dictionary is 12759 words > > Chris, > > How did you come up with that list? I took the New Academic Word > List[1] + the New General Service List[2] (sans dupli

Re: PyPI password rules

2014-08-26 Thread Skip Montanaro
On Tue, Aug 26, 2014 at 1:16 AM, Chris Angelico wrote: > Currently, her full dictionary is 12759 words Chris, How did you come up with that list? I took the New Academic Word List[1] + the New General Service List[2] (sans duplicates) and wound up with 1646 words of length four through six. Did

Re: Password strategy [OT] was: PyPI password rules

2014-08-26 Thread Chris Angelico
On Tue, Aug 26, 2014 at 5:45 PM, Andrew Berg wrote: > On 2014.08.26 01:16, Chris Angelico wrote: >> A huge THANK YOU to whoever set the rules for PyPI passwords! You're >> allowed to go with a monocase password, as long as it's at least 16 >> characters in length. Finally, someone who recognizes X

Password strategy [OT] was: PyPI password rules

2014-08-26 Thread Andrew Berg
On 2014.08.26 01:16, Chris Angelico wrote: > A huge THANK YOU to whoever set the rules for PyPI passwords! You're > allowed to go with a monocase password, as long as it's at least 16 > characters in length. Finally, someone who recognizes XKCD 936 > passwords! > > And yes, I generated an XKCD 936

PyPI password rules

2014-08-25 Thread Chris Angelico
A huge THANK YOU to whoever set the rules for PyPI passwords! You're allowed to go with a monocase password, as long as it's at least 16 characters in length. Finally, someone who recognizes XKCD 936 passwords! And yes, I generated an XKCD 936 password for the job. My parrot is good at that... use