RE: Article / Document about passwords vs. passphrases

["Roger A. Grimes" <roger () banneretcs com>]

I can confirm that Vista DOES allow you to use spaces in passwords. 

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Florian Rommel
Sent: Monday, October 30, 2006 5:39 AM
To: Pen-Testing
Cc: security-basics
Subject: Article / Document about passwords vs. passphrases

Hi list(s) sorry for crossposting but I think this is "relevant" to both
lists.

I wrote an article about secure(r) passwords and easily formed ones
aimed at the "user" level which can be found here: http://blog. 
2blocksaway.com/2006/10/29/easy-passwords-that-are-secure/
I then proceeded to send this to some of my clients in pdf form and as
weblinks and i got quite a few mails this morning regarding it, some of
them good, some of them bad. And the bad ones i need some help with.

I was told that Windows vista will not let you use (SPACE) in your
password , can someone confirm or deny this? also someone said that only
the most recent version of linux allow you to have long passwords,
according to my memory, this has worked already for a looong time (i
remember i used a long password quite a few years back
already) so any info on that would be good too. Any pointer as to how to
improve this article would be excellent since quite a few of the people
I know use my stuff as reference and I wouldnt like to be "that" wrong
:)

Thanks already for any help, i appreciate it.

regards,

//F. Rommel
http://2blocksaway.com

------------------------------------------------------------------------
---
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has
designated Norwich University a center of Academic Excellence in
Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting
experience. 
Using interactive e-Learning technology, you can earn this esteemed
degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------