Network Security Experts: Frequent Password Changes

[rjk]

@Futile Gesture

… What is unforgivable though, and I hate, hate, hate systems that do this are passwords that are case sensitive. It really does make getting them right twice as hard. …

It does make getting them right a little harder, but it also makes cracking them a lot more than twice as hard. I can see from your post that you can use the shift key appropriately, so why is it so hard to use it in a password? A few years ago, one of our network guys ran a simple dictionary-based cracker against our password files, and got over half of them. We soon changed to a system that required mixed case and some non-alpha characters, and had hardly any problems.
[/rant]

I agree that writing down a password and keeping it in your wallet is a good way to remember it and keep it secure; I sometimes recommended that to users when I was working helpdesk. If your office is as secure as micco’s, the sticky on the monitor is fine, but that leaves you doing your own cleaning. :dubious:

[micco]

@rjk

If your office is as secure as micco’s, the sticky on the monitor is fine, but that leaves you doing your own cleaning. :dubious:

Home office, I don’t have to go to the corporate office more than a few times a year. As I said, this doesn’t apply to everyone but that’s the whole point - most security rules should not be applied to everyone without thought to individual circumstance.