 | | Re: LUGNET Memberships
|
| (...) Not if you only disable loggin in as that user from that ip. (...) I think a minimum of 6 characters is a good limit. It's the character diversity that is causeing problems. Also, you could make failed attempts take a few extra seconds to (...) (26 years ago, 25-Sep-00, to lugnet.people, lugnet.admin.general)
| | | | | Re: LUGNET Memberships
|
| I've been on a few BBSes, quite a while back now, and believe me, some of the passwords that I came up with were quite alphanumeric, and rather random. A hacker's chance of guessing a random, or even semi-random, password is therefore theoretically (...) (26 years ago, 25-Sep-00, to lugnet.people, lugnet.admin.general)
| | | | | Re: LUGNET Memberships
|
| (...) 36^6 is about equal to 2^31. Maybe it was typical 5-character pw's that resulted in 24-26 bits of true information...I don't remember for sure, it was many months ago. OK, yes, <calculator poking> 36^5 is about equal to 2^26. Also, IIRC, I (...) (26 years ago, 25-Sep-00, to lugnet.people, lugnet.admin.general)
| | | | | Re: LUGNET Memberships
|
| Hi there! Excuse me if i am totally lost here... Is it not so that a 6 letter password containing letters from A to Z and 0 to 9, can have 36^6 different combinations and contains 48 bits in a unique order? A binary value containing 0 or 1 in 8 (...) (26 years ago, 25-Sep-00, to lugnet.people, lugnet.admin.general)
| | | | | Re: LUGNET Memberships
|
| (...) ouch. How easy is it for a thief to get your customer number? How many digits is your PIN? (...) natch. :) (...) Disable accounts on repeated fails and you make it trivial to DoS someone. Disable IP addresses and you lock out the innocent on (...) (26 years ago, 25-Sep-00, to lugnet.people, lugnet.admin.general)
| | | | | Re: LUGNET Memberships
|
| (...) Actually, all they need to know is my customer number and a PIN to view my account records. I would consider my bank account records much more valuable than my LUGNET profile, no offense :) If the concern is script kiddies cracking accounts, (...) (26 years ago, 25-Sep-00, to lugnet.people, lugnet.admin.general)
| | | | | Re: LUGNET Memberships
|
| (...) Yup. (...) Done! Thank you very much. Chris (26 years ago, 25-Sep-00, to lugnet.people, lugnet.admin.general)
| | | | | Re: LUGNET Memberships
|
| (...) I started doing that about 2 weeks ago. It generates a password, sends an email with that password, then stores the encrypted password. The membership packet then contains a backup password. In the case of older members, or if someone deleted (...) (26 years ago, 25-Sep-00, to lugnet.people, lugnet.admin.general)
| | | | | Re: LUGNET Memberships
|
| (...) Wouldn't it be easier to e-mail the forgotten password to the e-mail address your members input upon registration? That e-mail could be intercepted but I don't think a lot of people would go into that kind of trouble to be able to look at (...) (26 years ago, 24-Sep-00, to lugnet.people, lugnet.admin.general)
| | | | | Re: LUGNET Memberships
|
| (...) Internally, it uses a suffix on the set number to avoid ambiguities arising from duplicates issues of a number, for example: (4 URLs) three sets, each numbered 1974, within a larger value pack also numbered 1974 :-). You can add the _1 suffix (...) (26 years ago, 24-Sep-00, to lugnet.people, lugnet.admin.general)
|
|
