Security Basics mailing list archives

Re: passwords


From: "Chris Berry" <compjma () hotmail com>
Date: Wed, 19 Feb 2003 13:08:46 -0800

From: "eer7y3n0h" <eer7y3n0h () nuvox net>
Yes it makes sense.

But only if strong passwords are enforced as well.  Let them use leet
and they might even forget it's a chore.
And really, every password they have should be changed, not just the
mail

I agree, we use very strong passwords (enforced by a custom password checking program that scores them before they are allowed) but only change every six months to avoid the sticky note problem. However, when we change, we change ALL the passwords, OS, database, email, websites, you name it.

Chris Berry
compjma () hotmail com
Systems Administrator
JM Associates

"Quick, easy, or cheap; pick any two."

_________________________________________________________________
Protect your PC - get McAfee.com VirusScan Online http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963


Current thread: