dropbox / dropbox/zxcvbn

"hello world" is safe?

Open
#372 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
CoffeeScript
Stars
16.1k
Forks
1k
PR merge metrics
No merged PRs in 30d

Description

I tried the library on my server and the first password that came to my mind -- "hello world" -- is marked as "Strong". "helloworld" isn't. I am unsure, maybe it *is* uncommon due to the space, OTOH it is such a common term, wouldn't it be tried early?

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reproducing the reported result for "hello world" and "helloworld" with the zxcvbn library, then trace the password-scoring entry point to understand how spaces and common terms are handled. No file or test is named in the issue; done requires a maintainer-confirmed expected classification and a regression test or documented conclusion.

Written by the indexing model from the issue text.

Assessment

Tech stack
coffeescript
Domain
security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.