-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dateline: Sun, 17 Mar 2002 17:04:53 -0800 (PST): laying low until the
bleeding stops, Ron Bouwhuis <[EMAIL PROTECTED]> transmits:

> Poor password choice - especially for key UIDs such as
> root - are the true Archilles Heel of *all* systems,
> regardless of other security measures taken.  

Here's my surefire way to create an "unguessable" password:

1. Pick your second favorite book or movie.

2. Take the first letter of each word in the title (this only really
works if you have a longish title).

3. Take the author's/director's initials (uppercase).

4. Take the year your edition was printed.

So, for the second book of the Lord of the Rings trilogy, by John
Ronald Reul Tolkein: The Two Towers (which isn't any one of my
passwords), we get:

ttJRRT84 --> 8 characters and definitely not succeptible to a
dictionary-hash attack. It's also easy to remember, since you just
sound it out as you type ("Two Towers, John Ronald... etc.).

You could also vary the sequence so that the author comes first, the
year comes first, etc. In fact, I recommend this approach if you have
to change passwords every six months or so--a practice I highly
encourage. Set all passwords on your system to expire within 90
days.

~ C




-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Processed by Mailcrypt 3.5.6 and Gnu Privacy Guard
<http://www.gnupg.org/>

iD8DBQE8lUEfs7Brp8Mn7wcRArVbAJ9E/tG73th5ArN6gHr2lnbB0d9A3gCeIFWx
/3Oqwqovl9nwRdjOQUGuE28=
=m+iV
-----END PGP SIGNATURE-----

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to