jquery.complexify.js icon indicating copy to clipboard operation
jquery.complexify.js copied to clipboard

Some banned passwords are actually ROT-13 encoded.

Open goozak opened this issue 10 years ago • 1 comments

Hello ! I was looking at the list of banned password and was wondering why some (like 'puvpntb') are there. A web search found a page (a bit on the snarky side) that explains how Twitter had obfuscated its original list using ROT-13 (simple letters permutation) — which would actually make sense to prevent 'naughty' words triggering parental control software.

Since Complexify doesn't seem to 'decipher' this password list, I'm not sure the current list is completely achieving its goal.

goozak avatar Jun 09 '15 13:06 goozak

Good catch Bruno. This regression is on me since I updated the password list. I'll look at decrypting them tomorrow and submit a pr.

-----Original Message----- From: "Bruno G." [email protected] Sent: ‎6/‎9/‎2015 9:44 AM To: "danpalmer/jquery.complexify.js" [email protected] Subject: [jquery.complexify.js] Some banned passwords are actually ROT-13encoded. (#29)

Hello ! I was looking at the list of banned password and was wondering why some (like 'puvpntb') are there. A web search found a page that explained how Twitter had obfuscated its original list using ROT-13 (simple letters permutation) — which would actually make sense to prevent 'naughty' words triggering parental control software. Since Complexify doesn't seem to 'decipher' this password list, I'm not sure the current list is completely achieving its goal. — Reply to this email directly or view it on GitHub.

msigley avatar Jun 10 '15 01:06 msigley