Re: Re[2]: password aging

Michael Shields (shieldscrosslink.net)
04 Sep 1998 04:33:32 +0000

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
• Next message: Stephen P. Berry: "Re: Penetration testing via shrinkware"
• Previous message: Stout, Bill: "RE: Penetration testing via shrinkware"
• Maybe in reply to: Stout, Bill: "Penetration testing via shrinkware"

In article <88256673.007FF788.00gwwest.sybase.com>,
"Ryan Russell" <ryanrsybase.com> wrote:
> Seriously though... 18 million to choose from, if the user
> isn't allowed to pick their own, is a big improvement
> over people being able to choose from the dictionary.

Could be. If you change your policy from allowing arbitrary
user-selected strings to requiring a six-character generated password,
then you know that no one will have a very bad password, but you also
know that no one will have a very good one. It's your decision
whether that's a step forward or not.

-- 
Shields, CrossLink.

• Next message: Stephen P. Berry: "Re: Penetration testing via shrinkware"
• Previous message: Stout, Bill: "RE: Penetration testing via shrinkware"
• Maybe in reply to: Stout, Bill: "Penetration testing via shrinkware"

This archive was generated by hypermail 2.0b3 on Sat Jul 17 1999 - 07:11:46 CDT