Re: [FW1] password mgmt

[Joe Matusiewicz <joem@nist.gov>]

At 02:08 AM 11/30/99 -0800, Jerald Josephs wrote:
>But then, most of us sync our Pilots with our
>computer so we don't lose the data, so now you have
>your passwords in two locations
>
>I wonder what is considered to be a sufficiently long
>password these days?  I am up to a 15 character password
>that I can remember. If you have a sufficiently long enough password
>that is alpha-numeric, is it safe enough to use in more than one place?

The longer the better, but 15 is a lot better than 8 which is probably is 
the bare minimal to use.  I tried building a dictionary file using standard 
ascii characters so that I could try my hand at brute forcing and after 16 
hours the file was close to 2 gig and it had not completed the first 6 
character combinations.  I do worry about some Palm III sploit coming out 
and getting at your synced files on the desktop. I have heard that there is 
one that is a DOS on the Palm port.

-- Joe

-- Joe
  


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================