On Thursday 03 Feb 2005 12:51, Daniel Carrera wrote:
> Christian Einfeldt wrote:
> > WRT to number four, I can't believe that someone would guess my
> > passwords.  They are events in my life that no one but me knows
> > about.  How would anyone guess that?  Even now that I have
> > announced it to the world?  Heh.
>
> Easy.
>
> 1) Start by running it through a dictionary including every word in
> English, Spanish and French. This would include the names of people,
> cities, countries, etc.
>
> If your password can be obtained through this method, you're screwed.
> A computer will find it in 2 minutes.
>
> 2) Then go through the list again making simple changes to the
> entries like various capitalizations, revernsing the letters, adding
> or removing a few letters, or modifying a few letters.
>
> If your password can be obtained through this method, you would be
> only a mildly inconvenient target. The attacker would have to go out
> for lunch while the computer finds your password.
>
> 3) Then try quasi-random collections of characters that still bear a
> resemblance to English phonetics. For example, "wasnunco".
>
> If your password can be guessed with this method, you are still
> screwed.

Then something like "my silly old dog has too many fleas"

msodh2mf

is pretty safe by those definitions, and is easily improved like

m50d#2mf

and so forth. I still don't think I need a program to make my passwords...

Actually I'd probably be fairly safe even with my dog's name dukhat, but I 
wouldn't try it...

tim 

-- 
---------------------------------------------------------
  Tim & Therese Fairchild
  Atchafalaya Border Collies.
  Kuttabul, Queensland, Australia.
---------------------------------------------------------
 Email       mailto:[EMAIL PROTECTED]
 Homepage    http://www.bcs4me.com
---------------------------------------------------------

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to