Mirror
/
zulip
mirror of https://github.com/zulip/zulip.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
zulip/static/templates
History
Greg Price a116303604 passwords: Express the quality threshold as guesses required. 
The original "quality score" was invented purely for populating
our password-strength progress bar, and isn't expressed in terms
that are particularly meaningful.  For configuration and the core
accept/reject logic, it's better to use units that are readily
understood.  Switch to those.

I considered using "bits of entropy", defined loosely as the log
of this number, but both the zxcvbn paper and the linked CACM
article (which I recommend!) are written in terms of the number
of guesses.  And reading (most of) those two papers made me
less happy about referring to "entropy" in our terminology.
I already knew that notion was a little fuzzy if looked at
too closely, and I gained a better appreciation of how it's
contributed to confusion in discussing password policies and
to adoption of perverse policies that favor "Password1!" over
"derived unusual ravioli raft".  So, "guesses" it is.

And although the log is handy for some analysis purposes
(certainly for a graph like those in the zxcvbn paper), it adds
a layer of abstraction, and I think makes it harder to think
clearly about attacks, especially in the online setting.  So
just use the actual number, and if someone wants to set a
gigantic value, they will have the pleasure of seeing just
how many digits are involved.

(Thanks to @YJDave for a prototype that the code changes in this
 commit are based on.)
 		2017-10-08 15:48:44 -07:00
..
settings passwords: Express the quality threshold as guesses required. 2017-10-08 15:48:44 -07:00
.gitignore
…
actions_popover_content.handlebars popovers: Fix padding to be more uniform. 2017-09-27 18:46:08 -07:00
admin_default_streams_list.handlebars components: Make button component styles sensible. 2017-06-08 17:09:31 -07:00
admin_emoji_list.handlebars components: Make button component styles sensible. 2017-06-08 17:09:31 -07:00
admin_filter_list.handlebars components: Make button component styles sensible. 2017-06-08 17:09:31 -07:00
admin_streams_list.handlebars frontend: Add aria-label attributes to textareas/input fields. 2017-07-14 14:45:10 -07:00
admin_tab.handlebars Restructure organization settings and permissions. 2017-08-28 17:20:13 -07:00
admin_user_list.handlebars bots: Add 'Bot type' column to bots list in organization settings. 2017-06-20 23:04:46 -04:00
alert_word_settings_item.handlebars alert_words_ui.js: Move the error message to the top. 2017-06-09 15:23:53 -07:00
announce_stream_docs.handlebars Clean announce_streams_docs handlebar to use 4 space indents. 2017-02-17 03:16:46 +05:30
bankruptcy_modal.handlebars Clean bankruptcy_modal handlebar to use 4 space indents. 2017-02-17 03:16:46 +05:30
bookend.handlebars bookend: Remove .sea-green class for Unsubscribe state. 2017-06-06 08:31:09 -07:00
bot_avatar_row.handlebars settings: Remove whitespace on left side of bot key. 2017-08-23 15:31:28 -07:00
bot_owner_select.handlebars Clean bot_owner_select.handlebars to use 4 space indents. 2017-03-09 01:17:23 -08:00
compose-invite-users.handlebars unicode: Replace "×" with HTML and HEX entities. 2017-08-22 16:31:53 -07:00
compose_all_everyone.handlebars Improve @all warnings user interface significantly. 2016-12-21 11:40:47 -08:00
compose_notification.handlebars unicode: Replace "×" with HTML and HEX entities. 2017-08-22 16:31:53 -07:00
default_language_modal.handlebars unicode: Replace "×" with HTML and HEX entities. 2017-08-22 16:31:53 -07:00
draft.handlebars frontend: Add hotkey information to title/inline text. 2017-08-23 17:12:09 -07:00
draft_table_body.handlebars Switch "drafts" to new component overlay. 2017-03-15 12:17:27 -07:00
email_address_hint.handlebars Clean email_address_hint.handlebars to use 4 space indents. 2017-03-10 11:07:49 -08:00
emoji_popover.handlebars emoji_picker: Add emoji showcase. 2017-09-29 21:09:00 +00:00
emoji_popover_content.handlebars emoji_picker: Move the category tabs to just below the emoji filter. 2017-09-29 20:22:09 +00:00
emoji_popover_emoji.handlebars emoji_picker: Don't display title text for emojis in emoji picker. 2017-09-29 21:10:07 +00:00
emoji_popover_search_results.handlebars emoji_picker: Change emoji picker to be category based. 2017-08-14 12:52:35 -07:00
emoji_showcase.handlebars emoji_picker: Add emoji showcase. 2017-09-29 21:09:00 +00:00
group_pms.handlebars Clean group_pms handlebar to use 4 space indents. 2017-02-17 03:16:46 +05:30
hotspot_overlay.handlebars hotspots: Add friendly whale illustration to popover. 2017-08-05 18:32:37 -07:00
invite_subscription.handlebars invite_subscription.handlebars: Upgrade font-awesome icon style. 2017-06-08 14:07:27 -07:00
loader.handlebars Remove the old spinner, replace with new one. 2017-01-06 10:37:54 -08:00
message_edit_form.handlebars message_edit_form.handlebars: Upgrade font-awesome icon style. 2017-06-08 14:07:27 -07:00
message_edit_history.handlebars message-editing: Show date lines between edits from different days. 2017-06-06 11:04:30 -07:00
message_group.handlebars Remove date separators from the top of the message feed. 2017-05-16 14:47:04 -07:00
message_reaction.handlebars Clean message_reaction.handlebars to use 4 space indents. 2017-03-09 01:17:25 -08:00
message_reactions.handlebars emoji_picker: Correctly restore the title attribute of base element. 2017-09-16 08:17:41 -07:00
more_topics.handlebars left-sidebar: Restyle "more topics" flow. 2017-10-04 23:23:03 -07:00
muted_topic_ui_row.handlebars Clean muted_topic_ui_row.handlebars to use 4 space indents. 2017-03-09 01:17:25 -08:00
new_stream_users.handlebars new_stream_users.handlebars: Upgrade font-awesome icon style. 2017-06-08 14:07:27 -07:00
notification.handlebars notifications: Improve HTML/CSS for desktop notifications. 2017-01-02 16:42:04 -08:00
propagate_notification_change.handlebars
…
recipient_row.handlebars Make recipient bar styling more compact and clean. 2017-09-06 18:49:54 -07:00
settings_tab.handlebars account-settings: Removed 'Updated settings' message from admin. 2017-03-10 10:53:06 -08:00
sidebar_private_message_list.handlebars Clean sidebar_private_message_list handlebar to use 4 space indents. 2017-02-16 14:45:08 -08:00
single_message.handlebars emoji_picker: Change reaction popover's base element. 2017-09-16 08:17:41 -07:00
stream_member_list_entry.handlebars streams: Update button styles to new styles. 2017-08-23 12:29:32 -07:00
stream_privacy.handlebars left-sidebar: Restyle to have new look. 2017-04-25 17:47:36 -07:00
stream_sidebar_actions.handlebars stream_sidebar: Clean up use of ambiguously named data-id. 2017-08-16 18:02:29 -07:00
stream_sidebar_row.handlebars stream_sidebar_row: Rename data-name to data-stream-name. 2017-08-16 18:03:44 -07:00
subscription.handlebars stream_data: Linkify URL in stream description. 2017-03-20 22:25:03 -07:00
subscription_creation_form.handlebars Clean up "Stream accessibility" section. 2017-08-24 14:19:49 -07:00
subscription_invites_warning_modal.handlebars unicode: Replace "×" with HTML and HEX entities. 2017-08-22 16:31:53 -07:00
subscription_setting_icon.handlebars
…
subscription_settings.handlebars user_settings: Add push notifications for all stream messages. 2017-09-14 05:41:37 -07:00
subscription_stream_privacy_modal.handlebars unicode: Replace "×" with HTML and HEX entities. 2017-08-22 16:31:53 -07:00
subscription_table_body.handlebars frontend: Add hotkey information to title/inline text. 2017-08-23 17:12:09 -07:00
subscription_type.handlebars
…
tab_bar.handlebars frontend: Add hotkey information to title/inline text. 2017-08-23 17:12:09 -07:00
topic_edit_form.handlebars Clean topic_edit_form handlebar to use 4 space indents. 2017-03-09 01:17:23 -08:00
topic_list_item.handlebars stream_list: Use data-topic-name for topic names. 2017-08-16 18:03:44 -07:00
topic_sidebar_actions.handlebars topic_sidebar_actions.handlebars: Upgrade font-awesome icon style. 2017-06-08 14:07:28 -07:00
typeahead_list_item.handlebars emoji: Migrate bugdown emoji to use sprite sheets. 2017-09-29 11:14:34 -07:00
typing_notification.handlebars Add typing notifications front end. 2017-03-17 20:45:07 -07:00
typing_notifications.handlebars Add typing notifications front end. 2017-03-17 20:45:07 -07:00
uploaded_files_list.handlebars settings: Enable sorting on uploads table. 2017-09-28 16:16:16 -07:00
user_info_popover.handlebars Remove arrow from message info popover by providing template. 2017-03-22 16:04:38 -07:00
user_info_popover_content.handlebars frontend: Add hotkey information to title/inline text. 2017-08-23 17:12:09 -07:00
user_info_popover_title.handlebars Make user_popover use user_info_popover template. 2017-03-22 16:04:38 -07:00
user_presence_row.handlebars Clean user_presence_row.handlebars to use 4 space indents. 2017-03-10 11:07:49 -08:00
user_presence_rows.handlebars
…