Comments (5)
Any support on this issue pls?
from zxcvbn.
@him11 possible duplicate of nulab/zxcvbn4j#84
from zxcvbn.
Hey, the typescript library is a fork of this JS one and is not "official".
I forked it because this library is completely outdated. Which means the typescript port is an improved version with updated dictionaries, some fixes and new matchers.
You used the password Tiger@0177
which results in a scoring of 3 for the typescript port. In the original library this it has a scoring of 2 like in the java port that you are using.
That is because of the updated dictionaries. The password was splitted into Tiger
and @0177
.
In the Typescript port Tiger
is ranked 256 in the password dictionary while in the original library it is ranked 210
which results in a different guess count. You could say that the cap isn't very big to move a whole score but the 210 is already pretty close to the scoring of 3.
All this can be seen in the comparison documentation of zxcvbn-ts https://zxcvbn-ts.github.io/zxcvbn/guide/comparison/
from zxcvbn.
Thanks @MrWook
Looks like the TS unofficial porting is updated instead of the parent project and the related java porting.
I have reached the owner of the java porting
nulab/zxcvbn4j#84
but looks like they don't have bandwidth to work on that.
@MrWook what's your suggestion here?
from zxcvbn.
The problem on this one is that the original xato password list isn't available on the internet anymore. So you can't update it.
I wanted to get my hands on the collection #1 - collection #5
lists but i'm not really a dark web user :D
I think you have multiple options to handle this case:
- Use the backend library only and make api calls with a debounce on password typing. Or only validate the password on save
- Use the client library only
- If you have node installed on your server you could use a little js script that is called on your backend to check the password
- Maybe use https://github.com/GoSimpleLLC/nbvcxz instead of https://github.com/nulab/zxcvbn4j . It has has the same updated and feature like zxcvbn-ts but a few more that i had't have the time to work on yet.
The last release was in 2020 but thats just because there isn't anything todo and it is kind of complete. The author is still active and helped me with the typescript port a lot
from zxcvbn.
Related Issues (20)
- Password File
- Electron app
- Code security
- Bypass password File HOT 2
- Creating Electron app
- README.md
- please delete this issue
- Password entropy property HOT 1
- Very slow for certain inputs
- recent year regex is... out of date. HOT 2
- 密码强度检测 HOT 1
- Just saying thanks
- Dead "Dropbox Blog Post" URL at demo site
- Possible DOS when run server side
- A ReDoS vulnerability exists in matching.coffee HOT 10
- Microsoft Edge component version showing wrong HOT 1
- Feature request: provide options for smaller builds
- Recommended successors? HOT 1
- I created a pure Swift version of this - how do I get it listed here?
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from zxcvbn.