https://bugzilla.wikimedia.org/show_bug.cgi?id=66793
Bug ID: 66793
Summary: Targeted forced password update
Product: MediaWiki
Version: unspecified
Hardware: All
OS: All
Status: NEW
Severity: enhancement
Priority: Unprioritized
Component: Maintenance scripts
Assignee: wikibugs-l@lists.wikimedia.org
Reporter: g...@wikimedia.org
CC: cste...@wikimedia.org
Web browser: ---
Mobile Platform: ---
Use case: Some security breach at some other company that results in
usernames/emails and passwords and/or hashes exposed. Users tend to reuse
passwords across sites, thus, the security of their mediawiki password could
also be compromised.
Thus, we could get access to that list of emails and force a password reset on
their account on their next login. We'd also probably want the maint script to
send the user an email when we do this.
--
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
