Re: Password Cracking & Consequences

[Scott Bradner <sob () HARVARD EDU>]

> Not with compromised desktops and phishing attacks around.

so changing forcing a passwd change reduces the window of vulnerability
so if an attack lags the interception of the password by a long time
changing the password helps - but if the attack comes soon after
the compromise changing the passwd does nothing useful

Scott

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.