<html><head></head><body><div class="ydp86599159yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:13px;"><div></div>
<div dir="ltr" data-setdir="false">I just happened to need to open an online account. Here are their instructions which seemed reasonable to me, especially not using email address for ID.<br></div><div dir="ltr" data-setdir="false"><blockquote><blockquote><div>Unique ID should meet the following criteria:<br><br> Minimum of 8 alphanumeric characters<br> Do not use spaces, special characters or an email address<br> An example of good Unique ID: CatandMouse1<br><br>A valid password must meet all of the following conditions:<br><br> Password should be a minimum of eight (8) characters and should contain the following:<br> English upper case letters (e.g., A, B, C, ...Z)<br> English lower case letters (e.g., a, b, c, ...z)<br> Numeric (e.g., 1, 2, 3, ...9)<br> Cannot use Unique ID, First name, Last name<br><br> An example of good Password: CHeese123</div></blockquote></blockquote><div><br></div></div><div><br></div>
</div><div id="ydp4277cab6yahoo_quoted_7180501520" class="ydp4277cab6yahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Wednesday, April 15, 2020, 11:43:34 PM PDT, Rick Moen <rick@linuxmafia.com> wrote:
</div>
<div><br></div>
<div><br></div>
<div>Quoting Paul Zander (<a shape="rect" href="mailto:paulz@ieee.org" rel="nofollow" target="_blank">paulz@ieee.org</a>):<br clear="none"><br clear="none">> Who can actually try a large number of logins? In my experience<br clear="none">> just trying to get into my own account, it takes a second to get a<br clear="none">> response that I messed up. That limits my attempts to not very many<br clear="none">> in an hour.<br clear="none"><br clear="none">Exactly!<br clear="none"><br clear="none">This is why the notion of cracking ssh passwords by brute force is<br clear="none">basically absurd. Break-ins of ssh access in the real world thus <br clear="none">involve either stolen security tokens or 'joe account' intrusions.<br clear="none"><br clear="none"><br></div>
</div>
</div></body></html>