Fwd: GSoC Weekly Report (#4 and #5): Django on Jython

2008-06-29 Thread Leo Soto M.
-- Forwarded message -- From: Leo Soto M. <[EMAIL PROTECTED]> Date: Mon, Jun 30, 2008 at 12:12 AM Subject: GSoC Weekly Report (#4 and #5): Django on Jython To: Jython-Dev Developers <[EMAIL PROTECTED]> Here is me again, back to doing weekly reports (sorry for missing the last one

Re: QuerySetPaginator object_list type check?

2008-06-29 Thread SmileyChris
Although, as Alex points out, it should be obvious by the name of the model that it should be passed a QuerySet, I think that the fact that a list has a "count" method means that a sanity check could be helpful for debugging. It's a dead easy change with minimal overheads so go ahead and open a t

Re: More secure user password reset

2008-06-29 Thread SmileyChris
On Jun 29, 9:42 am, Simon Willison <[EMAIL PROTECTED]> wrote: > On Jun 28, 10:01 pm, "Scott Moonen" <[EMAIL PROTECTED]> wrote: > > > If you add the timestamp into both the hash and the token then you can > > achieve a more granular expiration policy. > > That's the approach I use for djangopeopl

Re: More secure user password reset

2008-06-29 Thread Craig Ogg
On Sat, Jun 28, 2008 at 4:48 PM, Simon Willison <[EMAIL PROTECTED]> wrote: > > On Jun 28, 11:21 pm, Luke Plant <[EMAIL PROTECTED]> wrote: >> MD5 is 8 chars shorter. Do we really need SHA-1? If I understand >> correctly, the only known vulnerability with MD5 is the ability to >> force collisions,

Re: More secure user password reset

2008-06-29 Thread Rudolph
Thanks Simon, for the idea of using a timestamp in the url and in the hash. A really good idea. You could shorten the hash to 6 digits by using the HOTP algorithm (http://www.openauthentication.org/). If we send it in base32 it will be even shorter. I've got the Python code for HOTP ready and wou

Re: QuerySetPaginator object_list type check?

2008-06-29 Thread Alex Koshelev
Regular `Paginator` is for any sequence of object (it calls `len` for count). `QuerySetPaginator` is for `QuerySet` objects. Find the right choice must developer itself. Its easy:) On Jun 29, 4:54 am, "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote: > I just spent a while chasing my tail because I