In a recent note, Arthur T. said: > Date: Mon, 8 Jan 2007 20:17:14 -0500 > > The correct usage of password rules should be to > exclude dictionary attacks while maintaining as large a > password space as possible. > Bluffing. Dictionary attacks count on a significant fraction of users choosing passwords from a particular small subset of the space. Dictionary attacks then concentrate on that subset, thus rendering themselves suboptimal. And choosing passwords to exclude dictionary attacks is counting on the attackers to be suboptimal in that respect. And around we go.
A perfect poker player can't be bluffed. But neither is he capable of bluffing. -- gil -- StorageTek INFORMATION made POWERFUL ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
