IWETHEY v. 0.3.0 | TODO
1,095 registered users | 0 active users | 0 LpH | Statistics
Login | Create New User
IWETHEY Banner

Welcome to IWETHEY!

IWETHEY Home / IWETHEY Board / Security Forum / My Advice
Post #187,541
by pwhysall
Picture of pwhysall
12/20/04 2:45:34 PM
Reply
New My Advice
Make passwords long, and changed infrequently.

That way, a user can have something like "I like chocolate eggs" as their password.

Artificial complexity rules like "must contain letters, numbers and a mixture of upper and lower case, cannot contain dictionary words or your own name" simply lead to passwords being beautifully chosen and tastefully calligraphed onto the Post-It stuck on the monitor.

Peter
[link|http://www.ubuntulinux.org|Shill For Hire]
[link|http://www.kuro5hin.org|There is no K5 Cabal]
[link|http://guildenstern.dyndns.org|Home]
Use P2P for legitimate purposes!
Post #187,551
by SpiceWare
12/20/04 3:40:13 PM
12/20/04 3:43:48 PM
Reply
New not an option
requirement comes from the [link|http://www.flextronics.com|parent corporation](they bought us a few months ago).
Darrell Spice, Jr.                      [link|http://www.spiceware.org/cgi-bin/spa.pl?album=./Artistic%20Overpass|Artistic Overpass]\n[link|http://www.spiceware.org/|SpiceWare] - We don't do Windows, it's too much of a chore
Expand Edited by SpiceWare Dec. 20, 2004, 03:43:48 PM EST
Expand All History
Post #187,554
by FuManChu
Picture of FuManChu
12/20/04 3:45:02 PM
Reply
New More on phrases
[link|http://weblogs.asp.net/robert_hensing/archive/2004/10/22/246364.aspx|http://weblogs.asp.n...10/22/246364.aspx], which leads to other blog posts.

I tend to agree with you, Peter, that phrases are the best "happy medium" between cryptographic security and social security.

The Sig:
"Despite the seemingly endless necessity for doing
so, it's actually not possible to reverse-engineer intended invariants
from staring at thousands of lines of code (not in C, and not in
Python code either)."

Tim Peters on python-dev
     Complex Password Primer for Users? - (SpiceWare) - (19) - Dec. 20, 2004, 02:18:37 PM EST
         My Advice - (pwhysall) - (2) - Dec. 20, 2004, 02:45:34 PM EST
             not an option - (SpiceWare) - Dec. 20, 2004, 03:43:48 PM EST
             More on phrases - (FuManChu) - Dec. 20, 2004, 03:45:02 PM EST
         Re: Complex Password Primer for Users? - (Steve Lowe) - (13) - Dec. 20, 2004, 02:48:02 PM EST
             And you know, it's 100% right. - (pwhysall) - (10) - Dec. 20, 2004, 02:52:36 PM EST
                 No argument - (Steve Lowe) - (9) - Dec. 20, 2004, 03:01:13 PM EST
                     Teehee - (pwhysall) - (8) - Dec. 20, 2004, 03:18:24 PM EST
                         That's another weakness - (Silverlock) - (7) - Dec. 20, 2004, 08:01:39 PM EST
                             30 days is not onerous. - (static) - (6) - Dec. 20, 2004, 09:24:26 PM EST
                                 No it won't - (drewk) - (5) - Dec. 20, 2004, 09:29:21 PM EST
                                     We had a password incident in a client of a former employer. - (static) - (4) - Dec. 20, 2004, 09:42:16 PM EST
                                         "... sizable number of the students ..." == "all who cared" -NT - (drewk) - (3) - Dec. 20, 2004, 09:57:42 PM EST
                                             And your point was...? - (static) - (2) - Dec. 20, 2004, 10:10:33 PM EST
                                                 Wasn't meaning to say that - (drewk) - (1) - Dec. 20, 2004, 10:15:30 PM EST
                                                     Ah -- alright then. - (static) - Dec. 20, 2004, 10:46:23 PM EST
             Bingo! - (SpiceWare) - (1) - Dec. 20, 2004, 03:45:16 PM EST
                 Also. - (static) - Dec. 20, 2004, 09:26:24 PM EST
         Got this from 'fortune' - (imric) - Dec. 22, 2004, 10:07:50 AM EST
         I've seen 3 methods - (Steven A S) - Dec. 28, 2004, 04:05:08 PM EST

Man, what a sad thing to be known for...
278 ms