Penetration Testing mailing list archives
Whitespace in passwords
From: "bryan allott" <homegrown () bryanallott net>
Date: Tue, 6 Sep 2005 11:19:58 +0200
generally, and i dont know if this is social conditioning due to the misnomer "passWORD" rather than passPHRASE but it seems that [most?] people choose passes that dont contain whitespaces, and in fact, there are some system implementations that wont allow whitespaces in the password. my main question, re security, is wether the whitespace made the password too vulnerable? [historically] and why this constraint is introduced in many systems.. [but then, if myth- why propogate it?] i'm thinking that whitespaces [if yr system can handle them, and why not?] would add another measure of complexity in cracking pwds?
------------------------------------------------------------------------------Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at:
http://www.securityfocus.com/sponsor/pen-test_050831 -------------------------------------------------------------------------------
Current thread:
- Multiple Spoofed HTTP Requests kuffya (Sep 02)
- RE: Multiple Spoofed HTTP Requests Omar A. Herrera (Sep 03)
- Re: Multiple Spoofed HTTP Requests Jayson Anderson (Sep 03)
- RE: Multiple Spoofed HTTP Requests Kyle Starkey (Sep 03)
- Re: Multiple Spoofed HTTP Requests Kaj Huisman (Sep 03)
- <Possible follow-ups>
- RE: Multiple Spoofed HTTP Requests Payton, Zack (Sep 03)
- Re: Multiple Spoofed HTTP Requests Marco Ivaldi (Sep 05)
- Whitespace in passwords bryan allott (Sep 06)
- Re: Whitespace in passwords Bruce K. Marshall (Sep 07)
- Re: Whitespace in passwords Anurag Joshi (Sep 11)
- Re: Whitespace in passwords Bruce K. Marshall (Sep 12)
- Whitespace in passwords bryan allott (Sep 06)