Not only doesn't the two digits at the end make the password that much more secure, because most cracking programs tries adding all digits from 0 to 9999 at the end, but it also makes the assumption that this would make a difference at all. A substantial part of the passwords out there are old style Unix passwords (even on non-Unix systems or systems that support better passwords), which will chop off everything after the 8th character.
So "Talwkatgig" and "Talwkatgig86" would likely be seen as the same password -- and so would "Talwkatg".


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/245/26496#26496