RE: password questions

2011-09-12 Thread Alan Davies
(eg. Fru1tlegsSmell!)? No, not in 99.999% of real life scenarios. Scientifically, yes, of course! a -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: 10 September 2011 23:31 To: NT System Admin Issues Subject: RE: password questions I tend to agree

RE: password questions

2011-09-12 Thread Shauna Hensala
Thanks to all that responded. It is great to get so many perspectives. I appreciate the diversity of opinion here - it's always interesting to see all viewpoints. Thanks again. Shauna Hensala Subject: RE: password questions Date: Mon, 12 Sep 2011 10:31:42 +0100 From: adav...@cls

RE: password questions

2011-09-12 Thread Guyer, Don
Subject: RE: password questions What I tell the lay person... 1. Mix up the password with uppercase, lowercase, numbers and special characters. Take a current password and mix a couple characters. For example, if your current password is abracadabra, then change it to something like

Re: password questions

2011-09-12 Thread Micheal Espinola Jr
Before printing this email, please look at this frogs toes. -- Espi On Mon, Sep 12, 2011 at 8:10 AM, Guyer, Don don.gu...@fiserv.com wrote: http://www.fiserv.com/ [image: Description: Frog Signature] ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

RE: password questions

2011-09-12 Thread Guyer, Don
: 610-233-0404 www.fiserv.com http://www.fiserv.com/ From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] Sent: Monday, September 12, 2011 2:51 PM To: NT System Admin Issues Subject: Re: password questions Before printing this email, please look at this frogs toes. -- Espi

Re: password questions

2011-09-12 Thread Jonathan Link
Signature] ** ** *From:* Micheal Espinola Jr [mailto:michealespin...@gmail.com] *Sent:* Monday, September 12, 2011 2:51 PM *To:* NT System Admin Issues *Subject:* Re: password questions ** ** Before printing this email, please look at this frogs toes. -- Espi

RE: password questions

2011-09-12 Thread Guyer, Don
/ From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] Sent: Monday, September 12, 2011 2:51 PM To: NT System Admin Issues Subject: Re: password questions Before printing this email, please look at this frogs toes. -- Espi On Mon, Sep 12, 2011 at 8:10 AM, Guyer, Don don.gu

Re: password questions

2011-09-12 Thread Jonathan Link
[image: Description: Frog Signature] ** ** *From:* Jonathan Link [mailto:jonathan.l...@gmail.com] *Sent:* Monday, September 12, 2011 3:13 PM *To:* NT System Admin Issues *Subject:* Re: password questions ** ** Hmmm... so putting it all together the secret message is saying

RE: password questions

2011-09-10 Thread Michael B. Smith
Issues Subject: Re: password questions On Fri, Sep 9, 2011 at 6:02 PM, Crawford, Scott crawfo...@evangel.edu wrote: I don't think that's true.  Point me to a rainbow table that has that large of a keyspace.  I can't say I've looked exhaustively, but I've not been able to find one that even

RE: password questions

2011-09-10 Thread Crawford, Scott
with assurance that full tables for ASCII are available. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Friday, September 09, 2011 9:03 PM To: NT System Admin Issues Subject: Re: password

Re: password questions

2011-09-10 Thread Ben Scott
On Sat, Sep 10, 2011 at 9:06 AM, Michael B. Smith mich...@smithcons.com wrote: I can state with assurance that full tables for ASCII are available. Technically speaking, ASCII is 7 bits, so that may not be what we're talking about. -- Ben ~ Finally, powerful endpoint security that ISN'T a

Re: password questions

2011-09-10 Thread Steve Kradel
IMO all this business about rainbow tables for finding hash value collisions is, or will soon be, highly obsolete. A properly designed password system should use both (a) enough salt bits to render rainbow tables impractical, and (b) a computationally expensive, variable workload hashing

RE: password questions

2011-09-10 Thread Crawford, Scott
...@zetetic.net] Sent: Saturday, September 10, 2011 3:00 PM To: NT System Admin Issues Subject: Re: password questions IMO all this business about rainbow tables for finding hash value collisions is, or will soon be, highly obsolete. A properly designed password system should use both (a) enough salt bits

RE: password questions

2011-09-10 Thread Crawford, Scott
: password questions On Fri, Sep 9, 2011 at 6:02 PM, Crawford, Scott crawfo...@evangel.edu wrote: I don't think that's true.  Point me to a rainbow table that has that large of a keyspace.  I can't say I've looked exhaustively, but I've not been able to find one that even exhausts the entire

RE: password questions

2011-09-09 Thread Ben Schorr
Irrelevent. The tools used for brute forcing passwords just use the whole character set anyhow. Ben M. Schorr Roland Schorr Tower www.rolandschorr.com | www.officeforlawyers.com | Twitter: @bschorr From: Shauna Hensala [mailto:she...@msn.com] Sent: Friday, September 09, 2011 9:32 To:

Re: password questions

2011-09-09 Thread Jonathan Link
IMO, the most important thing that people need to know about passwords follows. DON'T RECYLCE PASSWORDS. On Fri, Sep 9, 2011 at 12:32 PM, Shauna Hensala she...@msn.com wrote: I have been asked to speak to an group regarding personal internet security. This will be a fairly light weight

RE: password questions

2011-09-09 Thread Crawford, Scott
Back in the day, L0pht would be completely ineffectual against such a password, even if you included said character in its character set. I emailed L0pht at the time and they said they didn't support cracking alt-char passwords. I've heard that this is not the case with other password

RE: password questions

2011-09-09 Thread Damien Solodow
) 317.447.6014 (fax) HARRISON COLLEGE From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Friday, September 09, 2011 1:59 PM To: NT System Admin Issues Subject: RE: password questions Back in the day, L0pht would be completely ineffectual against such a password, even if you included said

Re: password questions

2011-09-09 Thread Ben Scott
On Fri, Sep 9, 2011 at 12:32 PM, Shauna Hensala she...@msn.com wrote: I have been asked to speak to an group regarding personal internet security.   This will be a fairly light weight discussion and I have a couple of really good references regarding choosing secure passwords The best rules

Re: password questions

2011-09-09 Thread Ben Scott
On Fri, Sep 9, 2011 at 1:59 PM, Crawford, Scott crawfo...@evangel.edu wrote: There’s a quite dated, yet relevant, article at sysopt about some of my findings at http://www.sysopt.com/tutorials/article.php/3532756. Scott: That entire analysis is based on the scenario where you have an NTLM

Re: password questions

2011-09-09 Thread John Cook
: Fri Sep 09 13:59:00 2011 Subject: RE: password questions Back in the day, L0pht would be completely ineffectual against such a password, even if you included said character in its character set. I emailed L0pht at the time and they said they didn’t support cracking alt-char passwords. I’ve

RE: password questions

2011-09-09 Thread Crawford, Scott
Umm, actually it was mentioned. ☺ Paragraph 2. From: John Cook [mailto:john.c...@pfsf.org] Sent: Friday, September 09, 2011 1:23 PM To: NT System Admin Issues Subject: Re: password questions Not to mention alt characters are a major pain (or non existent) on some devices. John W. Cook Systems

Re: password questions

2011-09-09 Thread kz20fl
Message- From: Jonathan Link jonathan.l...@gmail.com Date: Fri, 9 Sep 2011 12:43:07 To: NT System Admin Issuesntsysadmin@lyris.sunbelt-software.com Reply-To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.comSubject: Re: password questions IMO, the most important thing that people

RE: password questions

2011-09-09 Thread Crawford, Scott
, at some level, the second is safer. Whether the gains for using an alt-char offset the disadvantages mentioned is up to the user. -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Friday, September 09, 2011 1:14 PM To: NT System Admin Issues Subject: Re: password

Re: password questions

2011-09-09 Thread John Cook
: Fri Sep 09 14:35:02 2011 Subject: RE: password questions Umm, actually it was mentioned. ☺ Paragraph 2. From: John Cook [mailto:john.c...@pfsf.org] Sent: Friday, September 09, 2011 1:23 PM To: NT System Admin Issues Subject: Re: password questions Not to mention alt characters are a major pain

Re: password questions

2011-09-09 Thread Ben Scott
2011/9/9 Crawford, Scott crawfo...@evangel.edu: However, the point remains that incorporating an alt-char vastly increases the brute-force space and therefore makes them harder to crack no matter how you're attempting to crack it. Even that's not the case, if rainbow tables are an option.

RE: password questions

2011-09-09 Thread Crawford, Scott
...@gmail.com] Sent: Friday, September 09, 2011 3:43 PM To: NT System Admin Issues Subject: Re: password questions 2011/9/9 Crawford, Scott crawfo...@evangel.edu: However, the point remains that incorporating an alt-char vastly increases the brute-force space and therefore makes them harder to crack

RE: password questions

2011-09-09 Thread Jacob
, some sites will limit the number of characters, etc. Banks tend to be the worst of this. From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Friday, September 09, 2011 9:43 AM To: NT System Admin Issues Subject: Re: password questions IMO, the most important thing that people need

Re: password questions

2011-09-09 Thread Micheal Espinola Jr
Excellent summary. This. -- Espi On Fri, Sep 9, 2011 at 10:59 AM, Crawford, Scott crawfo...@evangel.eduwrote: Back in the day, L0pht would be completely ineffectual against such a password, even if you included said character in its character set. I emailed L0pht at the time and they

Re: password questions

2011-09-09 Thread Jon Harris
...@gmail.com] *Sent:* Friday, September 09, 2011 9:43 AM *To:* NT System Admin Issues *Subject:* Re: password questions ** ** IMO, the most important thing that people need to know about passwords follows. DON'T RECYLCE PASSWORDS. On Fri, Sep 9, 2011 at 12:32 PM

Re: password questions

2011-09-09 Thread Ben Scott
On Fri, Sep 9, 2011 at 6:02 PM, Crawford, Scott crawfo...@evangel.edu wrote: I don't think that's true.  Point me to a rainbow table that has that large of a keyspace.  I can't say I've looked exhaustively, but I've not been able to find one that even exhausts the entire ascii space, let

Re: password questions

2011-09-09 Thread Ben Scott
On Fri, Sep 9, 2011 at 6:12 PM, Jacob ja...@excaliburfilms.com wrote: 1. Mix up the password with uppercase, lowercase, numbers and special characters. It is arguably more effective to use a longer password with a simpler scheme than a shorter password with a complicated scheme. They yield