Good Password Practice!

We all know (or should) that passwords are one of the first things to consider when securing a system.

A good password with letters (UPPER & lower) case, numbers and symbols, consisting of more than 8 digits would be an ideal password, only thing is it wont be too easy to remember!

We all know to stay away from using dictionary words in passwords, even if you have replaced a letter with a number, because these would be too easy to crack.

So heres a way of creating a good solid password that is also easy to remember.

Consider this password

iMholi2s - a good password with a combination of upper and lower case letters and
numbers which wouldnt be an easy password to crack.

Or this

lis&win - also a good password, this time combining a symbol with the letters.

So these passwords would be translated like this:

iMholi2s = in My humble opinion life is too short (stressing the My gives a capital M in
the password)
lis&win = linux is secure and windows is not ;)

Basically just taking the first letter from every word, in a sentence you will remember! Even stressing some words so that you get a capital letter in the password.

And finally, even once you have you're good password, it is still necessary to change this password on a regular basis. Because no matter how good you're password is, if someone wants to crack it they will in a matter of time.

Well thats it, if anyone has anything to add, feel free as ive just done this up while bored here at work.

Regards

r3b00+

a thing that i use that works well for me are prefixes of classes where i had a rought time for example cEc7578 or msG5956.... these are number that i will never forget...

Quote:

---

Well thats it, if anyone has anything to add, feel free as ive just done this up while bored here at work.

---

I wrote a password tutorial with similar methods a while ago. Also, I wrote a Javascript program to generate random passwords. Check them out! :)

Peace always,
<jdenny>

Sorry, didnt do a search before posting.
Checked out your tut, v. good btw.

As i said, was bored here at work and just decided to post a quick guide for newbies.

Regards

r3b00+

Very good, reboot. I've always felt that a key way hackers can break into computer systems is the user having a weak password, therefore the hacker cracks the password easily. There are many guidelines to follow such as to try to use the most number characters allowed, try to combine numbers, letters, etc. Also, to try to make sure the password isn't what is considered "common". By that, don't use your name, 123, 1010, God, Secret, root, etc. If you saw the movie entitled "Hackers" you'd know what I'm talking about. Like I've said, it's always good and healthy to make sure the users accounts on the machine are strong, and even maybe changed on a regular basis.

My solution has always been to use long passwords. Most of my passwords are 15 characters long, consist of several words, and do not appear in quotation dictionaries. With just letters and numbers, this allows for over 221x10^18 possible passwords.

I once ran a brute-force cracker on my college's password file (which wasn't even shadowed...), and to my surpruise, discovered that over a quarter of the student population had not changed thier password from thier stuident ID number. Neither had the system required them to. I could have pretended to be any of them if I had wanted to use the school system for malicious intent.

Sadly, most of the greatest hacks ever relied on human error rather than a security weakness.
Lists of commonly used passwords are easily available on the web. Use them.

Quote:

---

Lists of commonly used passwords are easily available on the web. Use them.

---

May i ask why you would want to use a commonly used password for your own password?

Thats ignorance at its worst!

r3b00+

I think he was referring to that some people use common passwords and that the most common passwords people use are on the web for someone to download them and look at. Like he said, some great hacks relied on human error, instead of a security hole.

hey rb300+ that was a cool stuff by the way most easiest way to remember tricky passwords is to name it after some memorable moment such as 9oN84920.here 9 is my d.o.b o(oct)is the month N is the nineteenth century 84 is the year and 920 is the time very easy to remember hard to guess even if someone guess your d.o.b he can't guess the time

Try this link to break into NT system, i have kept this on test

http://www.citycentre.com.kw/stats/index_old.asp

try to delete System files which i have kept read only

That was easy, deleting those files I mean. Btw, what does this have to do with the topic at hand?

sometimes you need to use brains, if you check there are login passwords for emails, ftp and the server, you need to download the files and try changing passwords and login names

sometimes you need to use brains, if you check there are login passwords for emails, ftp and the server, you need to download the files and try changing passwords and login names

I have always used upc codes on the nearest book pretty much unhackable unless they are using a password program

I have always used upc codes on the nearest book pretty much unhackable unless they are using a password program