Talk:OWASP Proactive Controls - Revision history

Doktoresperanto: /* Differences in two versions. */

2016-05-16T16:03:59Z

‎Differences in two versions.

Doktoresperanto: /* Differences in two versions. */ new section

2016-05-16T16:03:31Z

‎Differences in two versions.: new section

Thomas Herzog: Blanked the page

2014-07-21T16:01:39Z

Blanked the page

Jmanico at 21:11, 18 July 2014

2014-07-18T21:11:31Z

Jmanico at 21:02, 18 July 2014

2014-07-18T21:02:06Z

Thomas Herzog: Proposal for a regular expression for passwords

2014-07-18T16:18:20Z

Proposal for a regular expression for passwords

New page

Hi Jim,

When looking at your your project page, maybe I have something, that you might be interested in.

A while ago, Torsten figured out how to write the password policy of Windows (3 out of 4) as an regular expression:

^(?:(?=.*\d)(?=.*[A-Z])(?=.*[a-z])|(?=.*\d)(?=.*[^A-Za-z0-9])(?=.*[a-z])|(?=.*[^A-Za-z0-9])(?=.*[A-Z])(?=.*[a-z])|(?=.*\d)(?=.*[A-Z])(?=.*[^A-Za-z0-9]))(?!.*(.)\1{2,})[A-Za-z0-9!~<>,;:_=?*+#."&§%°()\|\[\]\-\$\^\@\/]{8,32}$

A short explanation:

password length 8 -32
Character set: -Za-z0-9!/~<>,;:_=?*+-#."&§$%^°()[]|@
at least 3 out 4 (uppercase and lowercase letters, numbers and special characters)
no more than 2 equal characters in a row (that's not Windows)

More on your document maybe later.

Best Regards,
Thomas

@@ Line 1: / Line 1: @@
 == Differences in two versions. ==
-I think you should mention about change between two version of Proactive Controls guide with reasons.
+I think you should mention about changes between two versions of Proactive Controls guide with reasons.
 OWASP does this in OWASP Top 10. I think you should do same thing in Proactive Controls.
 For example I am wondering what is equivalent of C10 of 2014 version in 2016?

← Older revision	Revision as of 16:03, 16 May 2016
Line 1:	Line 1:
	+	== Differences in two versions. ==

	+	I think you should mention about change between two version of Proactive Controls guide with reasons.
	+	OWASP does this in OWASP Top 10. I think you should do same thing in Proactive Controls.
	+
	+	For example I am wondering what is equivalent of C10 of 2014 version in 2016?

← Older revision		Revision as of 16:01, 21 July 2014
Line 1:		Line 1:
−	~~Thomas: Very interesting, move this here? https://www.owasp.org/index.php/OWASP_Validation_Regex_Repository~~

−	~~Hi Jim,~~
−
−	~~When looking at your your project page, maybe I have something, that you might be interested in.~~
−
−	~~A while ago, Torsten figured out how to write the password policy of Windows (3 out of 4) as an regular expression:~~
−
−	^(?:(?=.\d)(?=.[A-Z])(?=.[a-z])\|(?=.\d)(?=.[^A-Za-z0-9])(?=.[a-z])\|(?=.[^A-Za-z0-9])(?=.[A-Z])(?=.[a-z])\|(?=.\d)(?=.[A-Z])(?=.[^A-Za-z0-9]))(?!.(.)\1{2,})[A-Za-z0-9!~<>,;:_=?+#."&§%°()\\|\[\]\-\$\^\@\/]{8,32}$
−
−	~~A short explanation:~~
−
−	~~password length 8 -32~~
−	~~Character set: -Za-z0-9!/~<>,;:_=?*+-#."&§$%^°()[]\|@~~
−	~~at least 3 out 4 (uppercase and lowercase letters, numbers and special characters)~~
−	~~no more than 2 equal characters in a row (that's not Windows)~~
−
−	~~More on your document maybe later.~~
−
−	~~Best Regards,~~
−	~~Thomas~~

← Older revision		Revision as of 21:11, 18 July 2014
Line 1:		Line 1:
	Thomas: Very interesting, move this here? https://www.owasp.org/index.php/OWASP_Validation_Regex_Repository		Thomas: Very interesting, move this here? https://www.owasp.org/index.php/OWASP_Validation_Regex_Repository
−
−	~~***~~

	Hi Jim,		Hi Jim,

← Older revision		Revision as of 21:02, 18 July 2014
Line 1:		Line 1:
		+	Thomas: Very interesting, move this here? https://www.owasp.org/index.php/OWASP_Validation_Regex_Repository
		+
		+	***
		+
	Hi Jim,		Hi Jim,