 | | Re: LUGNET Memberships
|
| (...) Not if you only disable loggin in as that user from that ip. (...) I think a minimum of 6 characters is a good limit. It's the character diversity that is causeing problems. Also, you could make failed attempts take a few extra seconds to (...) (26 years ago, 25-Sep-00, to lugnet.people, lugnet.admin.general)
| | | | | Re: LUGNET Memberships
|
| I've been on a few BBSes, quite a while back now, and believe me, some of the passwords that I came up with were quite alphanumeric, and rather random. A hacker's chance of guessing a random, or even semi-random, password is therefore theoretically (...) (26 years ago, 25-Sep-00, to lugnet.people, lugnet.admin.general)
| | | | | Re: LUGNET Memberships
|
| (...) 36^6 is about equal to 2^31. Maybe it was typical 5-character pw's that resulted in 24-26 bits of true information...I don't remember for sure, it was many months ago. OK, yes, <calculator poking> 36^5 is about equal to 2^26. Also, IIRC, I (...) (26 years ago, 25-Sep-00, to lugnet.people, lugnet.admin.general)
| | | | | Re: LUGNET Memberships
|
| Hi there! Excuse me if i am totally lost here... Is it not so that a 6 letter password containing letters from A to Z and 0 to 9, can have 36^6 different combinations and contains 48 bits in a unique order? A binary value containing 0 or 1 in 8 (...) (26 years ago, 25-Sep-00, to lugnet.people, lugnet.admin.general)
| | | | | Re: LUGNET Memberships
|
| (...) ouch. How easy is it for a thief to get your customer number? How many digits is your PIN? (...) natch. :) (...) Disable accounts on repeated fails and you make it trivial to DoS someone. Disable IP addresses and you lock out the innocent on (...) (26 years ago, 25-Sep-00, to lugnet.people, lugnet.admin.general)
|
|
