On 10 Jan 2007 06:39:57 -0800, [EMAIL PROTECTED] (R.S.) wrote:

>Some auditors told me that it should be 3. I always asked why - "because 
>it should be 3. Everywhere is 3". My answer: "here is 5, si it invalid 
>number? It's not true about everywhere, because in many places it's 
>infinity".
>I also discussed it on RACF-L.
>The only reasonable answer I've got is it came from baseball rule: 
>"three strikes and you're out".
>Maybe the rule sounds different I have no idea about baseball rules. I'm 
>not sure if there are any. <g>

It's nice for consumers to know the rules.   For instance, if I screw
up my PIN at an ATM, I will retry once, but not twice.   Because I
know that if I screw up in my third attempt, I won't have a card for a
while.    It's amazing how unsure I am with a PIN after I make a
mistake.     My office has coded entry - but the third floor has a
different shaped keyboard.    The numbers are worn out of the main
keyboard but I don't really enter my entry PIN by number, but by motor
memory - which doesn't work when the keyboard is arranged differently.

But hackers also like knowing the rules.   They can try twice per day
to hack a PIN just the same way as consumers do.


Passwords are a technology that needs to be replace.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to