Re: Password policy publication

[Roger Safian <r-safian () NORTHWESTERN EDU>]

At 09:26 AM 10/28/2008, Shalla, Kevin put fingers to keyboard and wrote:
> Doesn't this require stealing the password file, so that you can run the
> brute-force attack?  Or are we protecting from sysadmins who already have
> access to the password file?

Not really...I've seen brute force attempts many times in my logs.
You just try common passwords, and hope for the best.


--
Roger A. Safian
r-safian () northwestern edu (email) public key available on many key servers.
(847) 491-4058   (voice)
(847) 467-6500   (Fax) "You're never too old to have a great childhood!"