Re: See what a weak password will get ya?

[Mathieu Ducharme <linux@wasted-army.com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On July 22, 2004 10:59 pm, s. keeling wrote:
> Incoming from Scarletdown:
> > An example of a good password (though since I'm posting it here, it can
> > no longer be considered good) is:
> >
> > P@s$w0rD
>
> I disagree.  A cracking program is going to attempt to match
> permutations of dictionary words.  This will not add much more time to
> reach the solution.  Better is concatenation of two strings that won't
> match a dictionary pattern:
>
> b1rDW0rm
>

I'm pretty sure dictionary attack also look for this. (?)

Use other characters that will make the word absolutely not dictionar- related

x[(P@s$)~(w0rD)]x

Still as easy to remember (longer to type though)

> > |<  == K
> > |
> > >< == X
> > >
> > |> == P
> >
> > Anyone else care to add to this little list?
>
> Hadn't thought of those.  Cute.
>
> Apparently, the best is to replace crypt based passwords with RSA
> based, and use longer passwords.
>
>
> --
> Any technology distinguishable from magic is insufficiently advanced.
> (*)               http://www.spots.ab.ca/~keeling
> - -

- -- 
Mathieu Ducharme
linux@wasted-army.com
Use GPG to avoid spam trap
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBAIcingfWgVs5hW0RAj20AKDJrhzVJg6isKeIAia/iEaGC3NeHQCgpBkf
Yh5JlhDFcg1fCEBwrpaKmvY=
=+Wfi
-----END PGP SIGNATURE-----