Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Prevent easily-guessed pin codes #593

Closed
brittag opened this issue Nov 8, 2021 · 1 comment
Closed

Prevent easily-guessed pin codes #593

brittag opened this issue Nov 8, 2021 · 1 comment
Labels
member Will improve life for members security Relating to the security of app/member data

Comments

@brittag
Copy link
Member

brittag commented Nov 8, 2021

What type of user is this for? (applicant/member/voting member/admin)

Members

Description

We should require the most secure pin codes that we can for our new door. We should have a blacklist that disallows using common code patterns like 1111111, 1212121, etc., and discourage people from using their phone number as their code.

We may be able to reuse an existing blacklist, since there's existing research on this: https://arxiv.org/abs/2003.04868

Screenshots of current behavior, if any

We didn't have any systematic process for preventing easily-guessed codes at our old space, since that was a lower-risk situation.

@brittag brittag added security Relating to the security of app/member data member Will improve life for members labels Nov 8, 2021
@brittag
Copy link
Member Author

brittag commented Dec 11, 2021

Entered a set of blacklisted codes, enabled by #598!

@brittag brittag closed this as completed Dec 11, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
member Will improve life for members security Relating to the security of app/member data
Projects
None yet
Development

No branches or pull requests

1 participant