[wp-trac] [WordPress Trac] #32979: Password UI: Regenerate PW after clearing field
WordPress Trac
noreply at wordpress.org
Wed Aug 19 12:22:44 UTC 2015
#32979: Password UI: Regenerate PW after clearing field
--------------------------+-----------------------------
Reporter: MikeHansenMe | Owner:
Type: enhancement | Status: new
Priority: normal | Milestone: Future Release
Component: General | Version: 4.3
Severity: normal | Resolution:
Keywords: needs-patch | Focuses:
--------------------------+-----------------------------
Comment (by atomicjack):
Replying to [comment:8 menkom]:
> Replying to [comment:6 atomicjack]:
> > Replying to [comment:5 wealthy]:
> > > Yea I might as well just put my own Password in if I don't like the
one you gave me as a choice..
> > > needs to have an option to choose another one
> > > And I hope all the passwords we all get are not the same??
> > > Does it really generate a new one for everyone..??
> >
> > Someone, somewhere, eventually, would have the same password
generated.
> >
> > But that doesn't really matter - as it is such a small %, that people
wouldn't know the username to match the password with as well. It'd go
back to bruteforcing, for which, there are many ways to defend against
those.
> >
> > There's no insecurity on that part, but let's be honest, nothing, at
all, is completely secure.
>
> The chances of generating the same password with that many characters is
literally 0.00001%
That's exactly what I'm saying; it is not at all worth worrying about
someone having the same password.
Even if they did, how would a person know to use that exact password on
your username? They wouldn't.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/32979#comment:9>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list