Re: Cryptography and Site Security: Please critique my security idea

From: Stephan Neuhaus (neuhaus@cs.uni-sb.de)
Date: 03/27/03

  • Next message: Mike: "Re: Security Certifications?" 
    From: Stephan Neuhaus <neuhaus@cs.uni-sb.de>
Date: Thu, 27 Mar 2003 17:10:31 +0100

    Robert Paris wrote:
    >>Check how strong your passwords
    >>are regularly.
    >
    >
    > What might this entail? I'm not sure I fully follow.

    This means that you should regularly check that your passwords aren't
    easy to guess. That usually means trying to guess them with a password
    guessing tool. Unguessable passwords are deemed "strong". Even one weak
    password can be a serious security hole, since with a guessed password,
    the cracker gains access to one of the machines and can launch an
    entirely different and more dangerous class of attacks on other,
    probably more valuable machines.

    Fun,

    Stephan

  • Next message: Mike: "Re: Security Certifications?"