Re: Have I been hacked?
On Sat 10 Jan 2015 at 15:27:15 -0700, Bob Proulx wrote:
> scott wrote:
> > Jerry Stuckle wrote:
> > > Actually, 62 possible characters (upper case, lower case and digits), 10
> > > positions is 62^10 or 839,299,365,868,340,224 possible combinations.
> > >
> > > Adding in special characters obviously would increase that.
> > >
> > > But there is no way you'll hit a server 1,000,000 times a second trying
> > > to brute force a password.
>
> Complete agreement. I want to go further and say that a password that
> you can remember without needing to write it down is probably not a
> good password.
Security of an ssh login is aimed at allowing access to some but denying
it to others. An authorised user who cannot remember his 20 character
password has experienced a security failure.
Reply to: