[Klug-general] password testing/cracking

[Thomas Edward Groves]

As a reader of a *lot* of science fiction in my youth I favour
the names of characters in stories.
If necessary I can put a bookmark in the relevant book.

On the subject of dictionary words: how about "sulphur"?
Should stop an American dictionary in it's tracks.

Tom
  ----- Original Message ----- 
  From: David Halliday 
  To: Kent Linux User Group - General Topics 
  Sent: Tuesday, March 26, 2013 6:53 PM
  Subject: Re: [Klug-general] password testing/cracking


  My 2c


  When it comes to easy to remember passwords I always suggest interleaving two words easy to remember. e.g.

  mum

  dad
  =

  mduamd


  You can write the words down and as long as people don't know the "secret" then it's safe.

  You can also do change letters to numbers. Again, no need to write that down.


  This guy has written LOTs on the subject, here is one: https://www.schneier.com/blog/archives/2007/01/choosing_secure.html

  If you are interested in security, his blog is probably the best place to start gaining knowledge, ideas and understanding.




  On 26 March 2013 11:54, Colin McCarthy <binarysignal at gmail.com> wrote:

    On 26 March 2013 05:53, Dan Attwood <danattwood at gmail.com> wrote:

      https://xkcd.com/936/



      is probably as good as explanation as you'll likely to get


    I use a combination of words like this system. It's surprisingly easy to remember a 16+ character password that way.


    This article although incredible long is extremely interesting on the subject of passwords http://www.wired.com/gadgetlab/2012/11/ff-mat-honan-password-hacker/all/


    It does not matter now long your password is if it's still easy to trick a machine or Apple agent into resetting your account.





      On 26 March 2013 09:42, james morris <jwm.art.net at gmail.com> wrote:

        On 26 March 2013 07:07, Gary Yeames-Smith <gary at hotel-media.tv> wrote:
        > Another method for password creation is to create a long memorable sentence
        > and then take the 1st letter of each word. This results in a easy to
        > remember password which looks completely random to other people.

        Why not use the memorable sentence itself? You've still got the first
        letter of each word, but as additional work, all the rest of them too
        ;-)

        Which is what I wanted to investigate but I've got a bit stuck as I
        haven't yet managed to crack such blinders as 'crackmenow'.

        And as far as memorable sentence creation goes, I'd take a leaf out of
        William S Burroughs' book, and how memorable sentences are constructed
        by the holders of record-breaking memory feats. Suggest seemingly
        nonsense sentences which have some sort of private/internal
        logic/association too it to the user who came up with it.

        Which will still be far too much for my parents to cope with.

        _______________________________________________
        Kent mailing list
        Kent at mailman.lug.org.uk
        https://mailman.lug.org.uk/mailman/listinfo/kent




      _______________________________________________
      Kent mailing list
      Kent at mailman.lug.org.uk
      https://mailman.lug.org.uk/mailman/listinfo/kent



    _______________________________________________
    Kent mailing list
    Kent at mailman.lug.org.uk
    https://mailman.lug.org.uk/mailman/listinfo/kent





------------------------------------------------------------------------------


  _______________________________________________
  Kent mailing list
  Kent at mailman.lug.org.uk
  https://mailman.lug.org.uk/mailman/listinfo/kent
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.lug.org.uk/pipermail/kent/attachments/20130327/cabfb78e/attachment.html>