Re: PASSWORD_HASHERS Check

2022-06-24 Thread Francisco Couzo
Here is a real-world example I found on a quick search: https://github.com/dimagi/commcare-hq/blob/6be7be39cb3f554670685e811a15720d46cc4a2d/settings.py#L192 On Fri, Jun 24, 2022 at 11:00 PM Francisco Couzo wrote: > If you happen to be using pytest and want to detect if you're testing, &

Re: PASSWORD_HASHERS Check

2022-06-24 Thread Francisco Couzo
If you happen to be using pytest and want to detect if you're testing, there's a really bad recommendation on this ticket: https://github.com/pytest-dev/pytest-django/issues/333, now that alone works, but if you were to import pytest, you would be running some test settings and be none the wiser.

Re: ConditionalGetMiddleware MD5

2020-09-10 Thread Francisco Couzo
e are no signs that this will change), it would still only happen > once every eight months, and it's fairly rare for anything to be > cached that long in the first place, I think. > > Taymon > > > On Thu, Sep 10, 2020 at 1:16 PM Francisco Couzo > wrote: > >

Re: ConditionalGetMiddleware MD5

2020-09-10 Thread Francisco Couzo
: > What would this protect against? > > On Thu, 10 Sep 2020 at 03:56, Francisco Couzo > wrote: > >> I think it would be a good idea to make ConditionalGetMiddleware use a >> hash function that's not as easy to find a collision as MD5, most probably >> SHA-256 or

ConditionalGetMiddleware MD5

2020-09-10 Thread Francisco Couzo
I think it would be a good idea to make ConditionalGetMiddleware use a hash function that's not as easy to find a collision as MD5, most probably SHA-256 or BLAKE2. I don't see a problem with just changing it, it will just invalidate the old cache. If there's an agreement on changing the hash fu