I think this is why the OP asked about encrypted password managers such as keepass and password safe. These programs allow you to use very complex passwords by maintaining an encrypted datanbase that only you have access to. In all truthfullness, even writing down passwords on paper is far more secure than using a "secure" password like "*Koobface01" on your Facebook account what with the GPU password cracking techniques out there... IF you can keep the paper physically secure.
On Apr 27, 2011 12:56 PM, "Michael Chaney" <mdcha...@michaelchaney.com> wrote: > > On Wed, Apr 27, 2011 at 1:20 AM, James Sizemore <yame...@gmail.com> wrote: > > These rules would almost definitely cause more break-ins, then "Must contain characters from at least two". The reason being, most break-ins are inside jobs, and these rules are complex enough that I bet more then half of the students write down there passwords, making the inside job much more likely. > > > > Password rules are a balance in trying to be complex enough to challenge automated password breakers, but not so complex as to require the end use to write it down, simply to remember it. > > I second this. Actual security will rise along with password > complexity to a certain point, after which security drops off > precipitously as complexity rises. That drop off point corresponds to > the place where people start leaving the password on a sticky note > attached to their monitor. > > People who use the very complex password schemes mistakenly think that > their only enemy is someone with a password cracking program, when in > fact the vast majority of intrusions are social in nature. > > Michael > -- > Michael Darrin Chaney, Sr. > mdcha...@michaelchaney.com > http://www.michaelchaney.com/ > > -- > You received this message because you are subscribed to the Google Groups "NLUG" group. > To post to this group, send email to nlug-talk@googlegroups.com > To unsubscribe from this group, send email to nlug-talk+unsubscr...@googlegroups.com > For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en -- You received this message because you are subscribed to the Google Groups "NLUG" group. To post to this group, send email to nlug-talk@googlegroups.com To unsubscribe from this group, send email to nlug-talk+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en
