Re: Password complexity - improvement



On 2007-08-16 Thor (Hammer of God) wrote:
Is there a way to enforce all 4 properties.

Enforcing passwords that MUST consist of uppercase letters, lowercase
letters, numbers AND special characters reduces the total number of
possible passwords, which in consequence has a negative impact on
your security.

Just to follow up, this is incorrect. More possible source characters
== more possible combinations. Can you elaborate on what you mean by
this?

This is not about more possible source characters. The amount of source
characters is exactly the same in both cases. I'm talking about limiting
the possible combinations out of these source characters. See my other
reply.

Regards
Ansgar Wiechers
--
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq



Relevant Pages

  • RE: Password complexity - improvement
    ... Lowercase letters ... The choice of character for at least four of my ten possible positions is circumscribed, while the other six characters can be from any of the four sets. ... That's pretty clearly a reduction in possible passwords of several orders of magnitude. ... Enforcing passwords that MUST consist of uppercase letters, ...
    (Focus-Microsoft)
  • RE: Password complexity - improvement
    ... More possible source characters == ... Can you elaborate on what you mean by this? ... Enforcing passwords that MUST consist of uppercase letters, ...
    (Focus-Microsoft)
  • Re: writing to serial port (COMM)
    ... But some of the hex codes for ASCII are easy to remember: ... Knowing these then help for other characters: ... 0x40 is '@', after that the uppercase letters start, and are easy to ...
    (comp.lang.java.programmer)
  • Re: [PATCH] Kbuild: set LC_MESSAGES=C (as LC_CTYPE=C is)
    ... Seems unfortunate to lose localized error messages. ... all I get is non-ASCII quote characters) ... This all started because of the awk invocation in arch/x86/lib. ... and nothing else (most importantly not uppercase letters) in awk, ...
    (Linux-Kernel)
  • Re: program
    ... That should be 13 characters; a non-empty source file must end with ... newline (C99, 5.1.1.2 #2). ... > OP> distinguish between lowercase and uppercase letters. ... When I run Ben Pfaff's version, again using shell redirection, I ...
    (comp.lang.c)