nanog mailing list archives

Re: AD and enforced password policies


From: Gary Buhrmaster <gary.buhrmaster () gmail com>
Date: Tue, 3 Jan 2012 00:05:00 +0000

On Mon, Jan 2, 2012 at 22:32, Jimmy Hess <mysidia () gmail com> wrote:
....
The sole root cause for "easily guessable passwords"  is  not  lack of
technical restrictions. It's also:  lazy or limited memory humans who need
passwords that they can remember.

Firstname1234!    is very easy to guess, and meets complexity and usual
length requirements.

Obligatory xkcd reference:  http://xkcd.com/936/

Gary


Current thread: