RE: managing passwords

["Ben Yau" <byau cardcommerce com>]

>
> > For example, one of my old passwords is
> >
> > atwcrbtr
> >
> > (nice password huh?  uncrackable?)
>
> uncrackable? i wouldn't think so. have you ever tried to crack it
> yourself? it's only 8 characters and all lowercase.
>

I wasn't able to crack it.  Then again I did not build too much onto the
original dictionary for Crack so that could be a factor as I have no
nonsense type words in my dictionary.  I've adjusted my passwords these days
anyhow to include numbers and other non-alpha chars for that reason that i'm
nervous of alphabetic-char-only passwords


> funny story, i had someone crack the admin password on my windows box at
> home* and install some kind of irc bot**. the password was something
> like the following:
>
> here is a really long sentence that i will use as my password
>

cute :)

I've been with sysadmins who also use things like
invalid*login
notvalid*login
go*away

etc.

Ben