If you let users choose their own passwords you will get things like:
Fluffly
Password
*UsersName*

We usually assign passwords like jmf94817, and we actually don't have to many problems 
with users posting their passwords.  We try to train them into understanding the 
implications of someone getting their password.  It seems to work pretty well.  

<<< Zeshan Ghory <[EMAIL PROTECTED]> 12/14  6:06p >>>
On Thu, Dec 13, 2001 at 02:29:44PM -0500, [EMAIL PROTECTED] 
([EMAIL PROTECTED]) wrote:
> Is anyone familiar with a government or private study that surveyed the top 10 
>places to store 
> passwords that were written down on paper; e.g. under the keyboard, etc?

I would imagine that it would be very difficult to obtain enough
information to carry out such a survey effectively.

Personally, I have certainly seen passwords (with corresponding 
user names) written on post-it notes stuck to monitors, on 
whiteboards, and sometimes just scribbled down on random bits of paper
lying on a desk.

This is much more likely to occur if people are *given* passwords
instead of choosing their own.


Zeshan 

Reply via email to