#34056: Update the deprecated password list used by CommonPasswordValidator to a
more recent list
-------------------------------------+-------------------------------------
Reporter: Paolo Melchiorre | Owner: nobody
Type: Bug | Status: new
Component: contrib.auth | Version: dev
Severity: Normal | Resolution:
Keywords: | Triage Stage:
CommonPasswordValidator | Unreviewed
Has patch: 1 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------
Description changed by Paolo Melchiorre:
Old description:
> The current file used to populate the list of common passwords used by
> CommonPasswordValidator is deprecated since May 2022:
> https://gist.github.com/roycewilliams/281ce539915a947a23db17137d91aeb7/revisions
> #diff-b92271fc57fc0e876a5a8f8cf65614283ba35f94a14269332081a5c6f3adfd50
>
> As suggested in the deprecated file a new version of the list is
> available:
> https://gist.github.com/roycewilliams/226886fd01572964e1431ac8afc999ce
>
> This is the command line I used to download and extract the list of
> password from the original gist:
> {{{
> $ curl
> https://gist.githubusercontent.com/roycewilliams/226886fd01572964e1431ac8afc999ce/raw/7e4f976f31f6f9bbd54781c7792f8272fb2fd613/pwnedpasswords-v6-top20k.txt
> | csvtool drop 49 - | csvtool col 3 -t : - | gzip -9 > common-
> passwords.txt.gz
> }}}
New description:
The current file used to populate the list of common passwords used by
CommonPasswordValidator is deprecated since May 2022:
https://gist.github.com/roycewilliams/281ce539915a947a23db17137d91aeb7/revisions
#diff-b92271fc57fc0e876a5a8f8cf65614283ba35f94a14269332081a5c6f3adfd50
As suggested in the deprecated file a new version of the list is
available:
https://gist.github.com/roycewilliams/226886fd01572964e1431ac8afc999ce
This is the command line I used to download and extract the list of
password from the original gist:
{{{
$ curl
https://gist.githubusercontent.com/roycewilliams/226886fd01572964e1431ac8afc999ce/raw/7e4f976f31f6f9bbd54781c7792f8272fb2fd613/pwnedpasswords-v6-top20k.txt
| csvtool drop 49 - | csvtool col 3 -t : - | uconv -x lower | gzip -9 >
common-passwords.txt.gz
}}}
--
--
Ticket URL: <https://code.djangoproject.com/ticket/34056#comment:2>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/01070183810d7c3a-47d2e128-b1f7-4651-ac29-91563c746b55-000000%40eu-central-1.amazonses.com.
