Re: 15 character minimum passwords

[Gary Flynn <flynngn () JMU EDU>]

Gary Dobbins wrote:
> e.g.
>
> "______oftDontKnowCrypto"
>
> Guess the first 7....

That is what I meant when I said "The only place
this presents a weakness is if one section is easier to crack
and it is possible to deduce the other section without having
to crack the second section."

Passwords should not have words and phrases in it.

If you pick a proper, random password, (meaning both
sections are random) then I believe the weakness
resulting from the LM method doesn't matter.

If the password is:

1234567 1234567
#FS1gws $Sv5

What does it matter?

--
Gary Flynn
Security Engineer
James Madison University

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.