<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Yet again: Your wife&#8217;s name doesn&#8217;t qualify as a password!</title>
	<atom:link href="http://sysconfig.ossafe.org/2009/07/yet-again-your-wifes-name-doesnt-qualify-as-a-password/feed/" rel="self" type="application/rss+xml" />
	<link>http://sysconfig.ossafe.org/2009/07/yet-again-your-wifes-name-doesnt-qualify-as-a-password/</link>
	<description>Linux, BSD, Mac OS, the Internet, Programming, and other things</description>
	<lastBuildDate>Tue, 18 May 2010 23:08:38 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: admin</title>
		<link>http://sysconfig.ossafe.org/2009/07/yet-again-your-wifes-name-doesnt-qualify-as-a-password/comment-page-1/#comment-168</link>
		<dc:creator>admin</dc:creator>
		<pubDate>Thu, 16 Jul 2009 00:09:59 +0000</pubDate>
		<guid isPermaLink="false">http://sysconfig.ossafe.org/?p=113#comment-168</guid>
		<description>And again, Twitter utterly fails when it comes to security basics: 
http://www.techcrunch.com/2009/07/15/another-security-tip-for-twitter-dont-use-password-as-your-password/</description>
		<content:encoded><![CDATA[<p>And again, Twitter utterly fails when it comes to security basics:<br />
<a href="http://www.techcrunch.com/2009/07/15/another-security-tip-for-twitter-dont-use-password-as-your-password/" rel="nofollow">http://www.techcrunch.com/2009/07/15/another-security-tip-for-twitter-dont-use-password-as-your-password/</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: admin</title>
		<link>http://sysconfig.ossafe.org/2009/07/yet-again-your-wifes-name-doesnt-qualify-as-a-password/comment-page-1/#comment-167</link>
		<dc:creator>admin</dc:creator>
		<pubDate>Wed, 15 Jul 2009 23:58:17 +0000</pubDate>
		<guid isPermaLink="false">http://sysconfig.ossafe.org/?p=113#comment-167</guid>
		<description>Sounds familiar :-)</description>
		<content:encoded><![CDATA[<p>Sounds familiar <img src='http://sysconfig.ossafe.org/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tomas Kramar</title>
		<link>http://sysconfig.ossafe.org/2009/07/yet-again-your-wifes-name-doesnt-qualify-as-a-password/comment-page-1/#comment-166</link>
		<dc:creator>Tomas Kramar</dc:creator>
		<pubDate>Wed, 15 Jul 2009 21:57:00 +0000</pubDate>
		<guid isPermaLink="false">http://sysconfig.ossafe.org/?p=113#comment-166</guid>
		<description>Yeah, I love those sites.. Especially my hosting provider who in addition disallows some &quot;special&quot; characters in passwords.

And I agree that brain is the best place, although I could tell you a story. I created a new account at the new bank, because they had a super high interest rate. I was assigned a temporary customer id and password, which I had to (both) change immediately after logging in to my internet banking account. So I picked a crazy paranoid password and id and saved it to my brain. Week after, my debit card arrived via snail mail with instructions to activate it in IB.

But I forgot the password. So I called the hotline, where they asked for my customer id, which I forgot too :)</description>
		<content:encoded><![CDATA[<p>Yeah, I love those sites.. Especially my hosting provider who in addition disallows some &#8220;special&#8221; characters in passwords.</p>
<p>And I agree that brain is the best place, although I could tell you a story. I created a new account at the new bank, because they had a super high interest rate. I was assigned a temporary customer id and password, which I had to (both) change immediately after logging in to my internet banking account. So I picked a crazy paranoid password and id and saved it to my brain. Week after, my debit card arrived via snail mail with instructions to activate it in IB.</p>
<p>But I forgot the password. So I called the hotline, where they asked for my customer id, which I forgot too <img src='http://sysconfig.ossafe.org/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: admin</title>
		<link>http://sysconfig.ossafe.org/2009/07/yet-again-your-wifes-name-doesnt-qualify-as-a-password/comment-page-1/#comment-165</link>
		<dc:creator>admin</dc:creator>
		<pubDate>Wed, 15 Jul 2009 15:08:23 +0000</pubDate>
		<guid isPermaLink="false">http://sysconfig.ossafe.org/?p=113#comment-165</guid>
		<description>Yes, to a certain extent that is true. However, many sites limit your password lengths (aka &quot;choose a password between 6 and 12 characters&quot;), which obsoletes your approach.

It&#039;s certainly arguable, but I think it&#039;s still better to write down a password on an offline media (which would require physical theft) than to choose a simple password, as simple passwords could be hacked by literally anyone out there, whereas your offline notes can only be accessed by a rather tiny group of people (if at all).

But we do agree on the fact that the brain is the best place to store a password :-)</description>
		<content:encoded><![CDATA[<p>Yes, to a certain extent that is true. However, many sites limit your password lengths (aka &#8220;choose a password between 6 and 12 characters&#8221;), which obsoletes your approach.</p>
<p>It&#8217;s certainly arguable, but I think it&#8217;s still better to write down a password on an offline media (which would require physical theft) than to choose a simple password, as simple passwords could be hacked by literally anyone out there, whereas your offline notes can only be accessed by a rather tiny group of people (if at all).</p>
<p>But we do agree on the fact that the brain is the best place to store a password <img src='http://sysconfig.ossafe.org/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tomas Kramar</title>
		<link>http://sysconfig.ossafe.org/2009/07/yet-again-your-wifes-name-doesnt-qualify-as-a-password/comment-page-1/#comment-164</link>
		<dc:creator>Tomas Kramar</dc:creator>
		<pubDate>Wed, 15 Jul 2009 14:50:42 +0000</pubDate>
		<guid isPermaLink="false">http://sysconfig.ossafe.org/?p=113#comment-164</guid>
		<description>I think that obscure passwords are not good, because even if users pick such password, then usually one of these things happens:

1. They forget it, restore it and change it to something simple
2. They write it down somewhere

So I think that a better approach is to use whole sentences as passwords. Even simple sentences like &quot;My wife&#039;s name is ..&quot; are immune to dictionary attacks, bruteforce attacks and rainbow tables.</description>
		<content:encoded><![CDATA[<p>I think that obscure passwords are not good, because even if users pick such password, then usually one of these things happens:</p>
<p>1. They forget it, restore it and change it to something simple<br />
2. They write it down somewhere</p>
<p>So I think that a better approach is to use whole sentences as passwords. Even simple sentences like &#8220;My wife&#8217;s name is ..&#8221; are immune to dictionary attacks, bruteforce attacks and rainbow tables.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
