Re: stupid password tricks

From: newsposter+csm@oceanwave.com
Date: 01/01/02 

From: <newsposter+csm@oceanwave.com>
Date: 01 Jan 2002 13:52:05 -0500

(Using the first letter of phrases as good passwords)

ruzel> I'm wondering if: 1. This idea has already been thought of a
ruzel> million times already.

Yep.

ruzel> 2. This is a good technique for create long passwords without
ruzel> using dictionary words - while at the same time those passwords
ruzel> can be easily remembered.

Not the way you generated it, no. You only have lowercase alphabetic
characters. Good passwords should have a mix of case, alphanumerics,
and other characters. Using all lowercase alphabetic characters in
passwords can be brute forced in a reasonable amount of time (with
enough CPU power) these days.

Relevant Pages

  • Re: US Military bans HTML in emails
    ... Complex passwords are not that much harder to ... Consider a password with a choice of X different characters for each ... takes using all upper- and lowercase letters, ... I can see only two advantages of complex passwords: ...
    (comp.os.vms)
  • RE: Basic question
    ... If somebody else hasn't covered it already, I'll try to send out a Kerberos ... > Unicode character set and can be up to 128 characters long, ... > Pre-W2K user interfaces limits do not allow passwords to ... I believe that you are referring to *LM* hashes. ...
    (Focus-Microsoft)
  • Re: Paper & pencil password algorithm
    ... generator and generate a password as a permutation of a whole ... The advantage of a random sequence generator is that I can make my ... I can't imagine ever wanting passwords ... convenience I'll probably keep most of them between 20 and 50 characters ...
    (sci.crypt)
  • RE: Password statistics and standards
    ... If you shut off the storage of LM hashes, over 9 Characters will buy you ... Take a look at Perfect Passwords for some creative ideas: ... information about accounts which is helpful in telling me ... Norwich University ...
    (Security-Basics)
  • Re: US Military bans HTML in emails
    ... You mean like requiring 6-character passwords to now be "complex"? ... the need for non-alpha characters. ... I've seen passwords with zeros for O's and 3's for E's. ... What hacker ever think of that? ...
    (comp.os.vms)
Quantcast