Re: Password Storage

[Glenn English <ghe () slsware com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Doug W wrote:

> However, how do you account for having multiple support staff, possibly
> working off site, most with extremely bad memories (unfortunately), and
> in need of high level rights to fix systems etc.

I've had some success with the old "line (or 2) of a song" approach. The
first letters of the words get you apparent gibberish, mixed case, and
non dictionary-ness, and there's usually some punctuation. 2 lines gets
you length.

If it's easier to sing a little song than to dig out the password
stickie, the pws are remembered easily and don't get written down.

- --
Glenn English
ghe () slsware com

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFE0N6c04yQfZbbTLYRAn5qAJ42RTcMvH+HRvHAl1crBEUKET4wDQCeJAk0
qO58WwOA0lK7fhD4NoYjlB0=
=k2R1
-----END PGP SIGNATURE-----

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------