Todd Walton wrote:
> What security could there be in requiring passwords to be at least a
> day old before you can change them?

In this topic, the concept of writing down a password was chided as a
bad idea. Someone who knows more about this field than any of us not
only writes down his passwords, but recommends that others do too:

% lynx -dump 
http://freakonomics.blogs.nytimes.com/2007/12/04/bruce-schneier-blazes-through-your-questions/
 | perl -ne'@a=split;for(@a){print"  
$_"if((/Two,/../t\./)||(/es.\)/../b/)>1);print"\n"if/edd/};print"\n--\n"if/d-w/'|fmt
 -uw72

  Two, I write my passwords down.  There's this rampant myth that
  you shouldn't write your passwords down.  My advice is exactly
  the opposite.  We already know how to secure small bits of paper.
  Write your passwords down on a small bit of paper, and put it with
  all of your other valuable small bits of paper: in your wallet.
--
  That's why I recommend that people write their passwords down,
  as I said before.


http://freakonomics.blogs.nytimes.com/2007/12/04/bruce-schneier-blazes-through-your-questions/
http://tinyurl.com/2zan6q

Yes, that was from Bruce Schneier[1] himself.

-john

[1] http://geekz.co.uk/schneierfacts/fact/322  That Bruce Schneier.


-- 
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list

Reply via email to