Re: [Sigia-l] Password usability

I just finished diagnosing a password input validation weirdness, and I
really wonder where some coders get their license.

The user instructions say "A mix of upper case letters, lower case letters,
and numbers, at least 8 characters long"

This was a valid password:
    Password1

As was this:
    Password1$

And this:
    %Password1

But this wasn't valid:
    Pas$word1


So ... you can probably imagine some of the hair pulling the call centre
will encounter.

Turns out they were using a rather stupid regex to test which was looking
for 8 _consecutive_ required characters, and allowing anything else anywhere
else.

I told them to change the regex to:

    (?=.*[a-z])(?=.*[A-Z])(?=.*[0-9]).{8,}


Why does the UX guy know more about regex than the coders???

e.

------------
2011  IA Summit
March 30 - April 3, 2011
Pre Conference Seminars: March 30-31
IA Summit: April 1-3
Hyatt Regency Convention Center
Denver, CO 
-----
When replying, please *trim your post* as much as possible.
*Plain text, please; NO Attachments

Searchable Archive at http://www.info-arch.org/lists/sigia-l/
________________________________________
Sigia-l mailing list -- post to: [email protected]
Changes to subscription: http://mail.asis.org/mailman/listinfo/sigia-l