Re: 15 character minimum passwords

[Gary Flynn <flynngn () JMU EDU>]

> -----Original Message-----
> [mailto:SECURITY () LISTSERV EDUCAUSE EDU]On Behalf Of Scott Bradner
>> Gary Flynn wrote:
> > If the password is:
> > 1234567 1234567
> > #FS1gws $Sv5
> > What does it matter?
>
> not much, but it will be writen on a postit note stuck to teh computer

Mine aren't.

Lucas, Bryan wrote:

> That's why you don't do random passwords, you do mnemonic.

Yup.

Besides, these days what would be better:

1) A good password on a postit note where a criminal would have to
   have physical access to the computer to get it; maybe through
   locked doors.

   (Corollary - Is anyone saying that they don't have things written
    down on their desk at least as confidential as a computer
    password?)

or

2) An easy-to-remember password that isn't written anywhere but
   exposed to 300,000,000 people on an Internet accesible server.


--
Gary Flynn
Security Engineer
James Madison University

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.