password expiration policy (was Re: UNIX V7)

[Christian Kennedy]

On Jun 15, 2009, at 10:13 AM, Dan Gahlinger wrote:

>
> because it doesn't work.
> most systems don't accept spaces.

Which, of course, is why you omit the spaces and run the words  
together, making dictionary attacks even more difficult. Let's see how  
a dictionary attack does with  
"mytestesare2infestedwithflamingspriochetes4you", shall we?

> and if we're talking windows, a password like that might only take a  
> few minutes to crack.

Gene's original posting was restricted to systems that don't have  
short password fields; in such systems long passphrases of vaguely (or  
patently) offensive words are both easier to remember and harder to  
crack than shorter passwords of random characters.  Even with its  
restriction of what? 128 characters?  Windows would allow for the use  
of such constructs.

--
Chris Kennedy
chris at mainecoon.com             AF6AP
http://www.mainecoon.com        PGP KeyID 108DAB97
PGP fingerprint: 4E99 10B6 7253 B048 6685  6CBC 55E1 20A3 108D AB97
"Mr. McKittrick, after careful consideration..."