Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Ten Windows Password Myths
Mark Burnett

Comments Mode:
Ten Windows Password Myths 2005-12-17
Mehran
Well, I have red your research about passowrds, but I like to comment that a complex and easy to memorize password can be created. To do so you have to creat a formula for you in your mind e.g. "Last 3 letters of your e mail address then # sing then first 3 letters of your email address in CAPS, t...

[ more ]  [ reply ]
Ten Windows Password Myths 2006-05-15
Anonymous
doesn't adding just one extended character like alt+60001 increase the dictionary size that must be searched with by enough to make them useful, it might be 6 characters for a single char, but if placed randomly in the password it does require the brute force hack to try characters of that style in ...

[ more ]  [ reply ]
Almost a good article 2006-08-01
Anonymous
While most of the advice here is good, some of it is just garbage.

Using familiar structures like phone numbers, file paths, or emails is a great way to improve the likelihood that your password can be guessed -- not cracked, just GUESSED. After a couple of days of use, a skilled typist can enter...

[ more ]  [ reply ]
Ten Windows Password Myths 2006-08-01
Anonymous
What is the fastest rate at which an XP box can accept login attempts? I find it very hard to believe the answer is "millions"

This article also did not discuss the userid/password pair. This is almost 2-factor authentication unless someone has discovered your userid.

...

[ more ]  [ reply ]
Use pass phrases, not passwords 2006-08-01
Alex Blewitt
Using a phrase is far easier to remember than a password, and with 127 characters at your disposal, you can easily use it.

For example, the paragraph above could be used as a pass phrase, and fit in with the requirements. Of course, you'd need to be a good typist to ensure that you could type tha...

[ more ]  [ reply ]
Ten Windows Password Myths 2006-08-01
Chris Giddings
Most OSes do not allow for spaces in passwords. I don't know of many *NIX environments that do. However, Darwin and OS X do allow for spaces.

I have also found that for my passwords, using the first or last letter of every word in a sentance makes for a very strong and difficult to crack password...

[ more ]  [ reply ]
Ten Windows Password Myths 2006-08-01
Anonymous
I must say, using an email address as a password seems like dubious advice. I may as well use my wife's birthday or something equally cliché....

[ more ]  [ reply ]
Ten Windows Password Myths 2006-08-01
verisimilidude
If keyloggers are a concern you can use the Windows on-screen keyboard (WindowsKey - u) to turn your password into a series of mouse moves and clicks. Of course that makes shoulder surfing much easier....

[ more ]  [ reply ]
Min. 15 char password setting is easy in Windows 2003 2006-08-02
Anonymous
You can use ADSIedit.msc to set the AD atribute "minPwdLength" to a value of 15 chars. This only works in 2003 AFAIK....

[ more ]  [ reply ]
ALT-255 2006-08-02
Anonymous
Historically, ALT-255 added some security in the DOS days because it printed whitespace -- so if you typed a password that wasn't getting obscured on the screen, it looked like you simply entered a space.

But under windows this is indeed pretty pointless today....

[ more ]  [ reply ]
Ten Windows Password Myths 2006-08-02
Anonymous
I like to use sentences, those are easy to remember and the final password is not bad. For instance, I can use "Iossfmb1glfm" and just remember what was said on the first step on the moon. Using the first letter of words of a sentence that makes sense to you alone has been working very well (for me ...

[ more ]  [ reply ]
Ten Windows Password Myths 2009-10-21
Anonymous
There?s a way to reset the password and it doesn?t involve reformatting and reinstalling Windows. The solution is called Windows Password Recovery Tool. It can reset almost all Windows passwords in seconds. If you want to know how to use it, please visit it http://www.windowspasswordsrecovery.com...

[ more ]  [ reply ]







 

Privacy Statement
Copyright 2009, SecurityFocus