News for hackers. Stuff that matters.
Re:I Hate the News (2006) by sarciszewski on Wednesday March 18, 2015 @10:08AM (#9225534)
There are much better ways to enforce this validation. Shoot me an email if you'd like any assistance.

Also, https://github.com/dropbox/zxcvbn is amazing.

Re:I Hate the News (2006) by alexbecker on Wednesday March 18, 2015 @11:30AM (#9226160)
I wonder why my searches never turned this up. I ended up making my own: https://github.com/alexbecker/password-strength
Re:I Hate the News (2006) by tom-lord on Thursday March 19, 2015 @06:22AM (#9231032)
That looks really cool - I haven't seen it before, thanks!

The "offending system" I mentioned, however, is our old PHP application that I don't really work on. (I mainly develop much more modern Rails stuff!)

Like I said, the primary concern of the company is simply to keep pen testers happy - and their criteria for a "secure" website is, in my opinion, often misleading or even downright wrong. But if I ever get the chance to genuinely improve the system, I'll definitely look into using this.