[conspire] Password permutations

[paulz at ieee.org]

 I just happened to need to open an online account.    Here are their instructions which seemed reasonable to me, especially not using email address for ID.


Unique ID should meet the following criteria:

    Minimum of 8 alphanumeric characters
    Do not use spaces, special characters or an email address
    An example of good Unique ID: CatandMouse1

A valid password must meet all of the following conditions:

    Password should be a minimum of eight (8) characters and should contain the following:
        English upper case letters (e.g., A, B, C, ...Z)
        English lower case letters (e.g., a, b, c, ...z)
        Numeric (e.g., 1, 2, 3, ...9)
    Cannot use Unique ID, First name, Last name

    An example of good Password: CHeese123



    On Wednesday, April 15, 2020, 11:43:34 PM PDT, Rick Moen <rick at linuxmafia.com> wrote:  
 
 Quoting Paul Zander (paulz at ieee.org):

> Who can actually try a large number of logins?    In my experience
> just trying to get into my own account, it takes a second to get a
> response that I messed up.  That limits my attempts to not very many
> in an hour.

Exactly!

This is why the notion of cracking ssh passwords by brute force is
basically absurd.  Break-ins of ssh access in the real world thus 
involve either stolen security tokens or 'joe account' intrusions.


  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://linuxmafia.com/pipermail/conspire/attachments/20200416/1a109baa/attachment.html>