Subject:
|
Security?
|
Newsgroups:
|
lugnet.off-topic.geek
|
Date:
|
Tue, 13 Mar 2001 14:13:55 GMT
|
Viewed:
|
111 times
|
| |
|
|
Last week at my job I had the misfortune of attending a mandatory seminar on
Information Security, which amounted to little more than "don't leave
sensitive documents on the bus." Through the course of it, though, the
lecturer discussed the various commonly-available software systems for
hammering through password protection, and he gave some time projections for
how long it would take to "guess" a certain type of password.
That's all well and good, but it occurred to me that my system locks me
out if I botch my password three times, so why are these intruder programs
able to make millions of attempts with no problem? More to the point, why
does my system bother to limit me to three tries, which in practice will
only result in inconvenience to me, since the interloper can apparently make
as many attempts as it wants?
Dave!
|
|
Message has 2 Replies:
 | | Re: Security?
|
| (...) First of all, a lot of systems don't lock out accounts, just because they are misconfigured, or their admin doesn't realise the danger. Also, remember that most password hacking will occure offline - the intruder will somehow (and there are (...) (24 years ago, 13-Mar-01, to lugnet.off-topic.geek)
| | | Re: Security?
|
| (...) I suspect that lockouts after password retries aren't to secure the system, they're to secure the user. Draconian measures tend to reinforce the idea that passwords are _important_, and you should _remember_ them. [0] Oh, and we (system (...) (24 years ago, 13-Mar-01, to lugnet.off-topic.geek)
|
8 Messages in This Thread:
  
- Entire Thread on One Page:
- Nested:
All | Brief | Compact | Dots
Linear:
All | Brief | Compact
|
|
|
|
