Slashdot Mirror

← Back to Stories (view on slashdot.org)

Spafford On Security Myths and Passwords

Posted by ryuzaki0 on from the mostly-just-laziness dept.

An anonymous reader writes "In a recent blog post, Eugene Spafford examines password security along with related issues and myths. In particular, he discusses how policies that may not necessarily make much sense anymore end up being labeled 'best practices,' and then propagated based on their reputation as such."

3 of 356 comments (clear)

  1. APG by wuzzeb · · Score: 5, Funny

    I have found that using APG is a great way to generate passwords. They are easy to remember since you can pronounce them. For example, I just ran the generation and these are the passwords that popped out. I have found that most users can remember these kinds of passwords.

    lewcyHirUx6 (lew-cy-Hir-Ux-SIX)
    drywaWrop2 (dry-wa-Wrop-TWO)
    ScekGul4 (Scek-Gul-FOUR)
    lacWaup7 (lac-Waup-SEVEN)
    IphIaft3 (Iph-Iaft-THREE)
    glidTevPos8 (glid-Tev-Pos-EIGHT)
  2. One attack he didn't mention... by patio11 · · Score: 5, Funny

    ... getting your server brute-forced by a Slashdotting.

    --
    Help poke pirates in the eyepatch, arr.
  3. Easy for a Star Trek Fan Maybe... by Qybylance · · Score: 5, Funny

    They do sound an awful lot like planet names... "Scotty, beam me down to Lac Waup 7!" "Can we recover the team on Sek Gul 4?" "The colony of Ip Laft 3 is under Romulan attack!"