[ale] passwords

Ron Frazier atllinuxenthinfo at c3energy.com
Sat Feb 12 11:14:43 EST 2011


That's pretty cool.  Lasspass is a neat option that stores all you long 
cryptic passwords in an encrypted vault and automatically feeds them to 
website login screens when needed.  Everything is protected by a master 
password.  You could use your strategy for the master password.

Ron

On 02/12/2011 11:04 AM, Drifter wrote:
>
> the recent chatter about network security has, mostly, skirted around 
> the password problem. Too many web sites that need strong security 
> restrict passwords by length, or character set, or both. So also do 
> many corporate web sites. Software exists that can generate random 
> alphanumeric passwords, but they routinely suffer the same fault: 
> being difficult to remember, users end up with notes taped to 
> monitors, voiding the security.
>
> For the past decade or so I have been recommending that computer users 
> pick out several favorite poems/songs and use them to generate passwords.
>
> For example, fans of mathematics might reach for Lewis Carroll:
>
> The time has come, the Walrus said, to talk of many things,
>
> which would generate the short password <tthctwsttomt>, which munged 
> just a little bit becomes <TthctW5ttomT>.
>
> or perhaps,
>
> 'Twas brillig, and the slithy toves
> Did gyre and gimble in the wabe
>
> which would generate <tbatstDgagitw>
>
> English majors might prefer something from "The Love Song of J. Alfred 
> Prufrock":
>
> In the room the women come and go,
>
> Talking of Michelangelo.
>
> Or the opening of "A Tale of Two Cities":
>
> It was the best of times, it was the worst of times;
>
> I do not, for obvious reasons, ever suggest the song
>
> "All I want for Christmas is a hippopotamus." :)
>
> The people I advise do not understand the need for encryption, so the 
> topic of pass phrases does not usually come up. Memorable quotations 
> from obscure works are ideal, but all too often are not considered.
>
> I wish that financial institutions would lift restrictions on password 
> length and complexity, but that would, almost certainly, entail 
> reworking a poorly crafted database.
>
> Sean
>
>
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
>    

-- 

(PS - If you email me and don't get a quick response, you might want to
call on the phone.  I get about 300 emails per day from alternate energy
mailing lists and such.  I don't always see new messages very quickly.)

Ron Frazier

770-205-9422 (O)   Leave a message.
linuxdude AT c3energy.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.ale.org/pipermail/ale/attachments/20110212/ae78baae/attachment-0001.html 


More information about the Ale mailing list