To LUGNET HomepageTo LUGNET News HomepageTo LUGNET Guide Homepage
 Help on Searching
 
Post new message to lugnet.admin.generalOpen lugnet.admin.general in your NNTP NewsreaderTo LUGNET News Traffic PageSign In (Members)
 Administrative / General / 5735
5734  |  5736
Subject: 
Re: Automated password appraisal (Re: New feature: Article rating)
Newsgroups: 
lugnet.admin.general
Date: 
Thu, 30 Mar 2000 18:02:46 GMT
Highlighted: 
(details)
Viewed: 
3499 times
  
In lugnet.admin.general, Stephen F. Roberts writes:
...But anyway, I tried '4Gxc5t'... it came back failed but its reasoning
was strange... (try it urself :-) the 'slight risk' ones just baffle me...

For one things, it's being a bit too harsh on numeric->alpha conversions like
4->A and 3->E...it should divide the intermediate results by 2 or something
internally while computing the score after a transformaion like that.


what's a slight risk about the fragment 'xc'? I can see a slight risk for
'cst' (central standard time?), but 'agx'?

They might be host name fragments, for example xc.foo.bar.edu or
agx.plonk.com, or AGX might be some acronym.


...Most of the other ones I knew were weak came back failed, but it
fequently chided me for 'slight risk' fragments that dont seem to make
sense. The above was the only one that I would have suspected to get at
least an 'adequate' :-/

I'll try to massage the number->letter conversions into being a little more
lenient in those cases.  But false positives (positive in the medical sense
of testing for something bad) are OK here.  What we don't want is missed
negatives.


...I noticed as I tinkered with some of the weak ones and watched the
changing reasoning, perhaps an additional feature would be to list 'good
features' of the password. such as saying "Good: 8 characters" or once it
complained that 'unique charactes <75%' perhaps say 'good: >75% unique
characters'... by watching the positive feedback, it may be possible to
'tune' bad passwords easier.

Ahh, OK.


...you can go back to ignoring me now...

No, thanks for the feedback!

--Todd



Message is in Reply To:
  Re: Automated password appraisal (Re: New feature: Article rating)
 
(...) ...Hmmm. I dug up old passwords from long dead servers (don't u hate it when u remember passwords, but not the login id? :-) ...But anyway, I tried '4Gxc5t'... it came back failed but its reasoning was strange... (try it urself :-) the 'slight (...) (24 years ago, 30-Mar-00, to lugnet.admin.general)  

309 Messages in This Thread:
(Inline display suppressed due to large size. Click Dots below to view.)
Entire Thread on One Page:
Nested:  All | Brief | Compact | Dots
Linear:  All | Brief | Compact
    

Custom Search

©2005 LUGNET. All rights reserved. - hosted by steinbruch.info GbR