Re: Re: RE: ADS Password Storage Protection

[eric.baechle () dhs gov]

Winshel;

Actually, a passphrase is not as secure as a random password.  As you probably have heard, "Don't use dictionary words" 
over and over again.  Even compound dictionary words are bad, ie: "firedogdalmation".  Compounding dictionary words 
with spaces, punctuation, and even gramatically correct modifiers in between is really no different than without.  It's 
a very simple substitution to try; "firedogdalmation" and then try "fire dog dalmation", "Fire Dog Dalmation", 
"Dalmation the Fire Dog", etc.

Using compound dictionary words could come back to bite you very quickly, even when used in long phrases.

Sincerely,

Eric Baechle, CISSP/ISSEP, etc.
Senior INFOSEC/OPSEC Engineer
Department of Homeland Security

---------------------------------------------------------------------------
This list is sponsored by: SensePost

Hacking, like any art, will take years of dedicated study and  
practice to master. We can't teach you to hack. But we can teach you  
what we've learned so far. Our courses are honest, real, technical  
and practical. SensePost willl be at Black Hat Vegas in July. To see  
what we're about, visit us at: 

http://www.sensepost.com/training.html
---------------------------------------------------------------------------