Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #202363

Re: Password policy.

Show all headers | View raw

On Tuesday 13 November 2018 11:23:13 peter@easthope.ca wrote:

> Hi,
>
> https://www.debian.org/doc/manuals/debian-reference/ch04.en.html#_good
>_password specifies "6 to 8 characters".  Is that adequate against
> currently available brute force?
>
> Thanks,                                  ... Peter E.

"John the ripper" can find a 6 char word in a couple seconds on a slow 
machine. Every char you add multiplies that time by 62 or so depending 
on the valid char spec. 52 for upper and lowercase plus 0-9= 62. Add 13 
more if you allow the punctuation on the upper row of keys shifted, I 
ran into a supplier site still useing 8 chars last summer, and sent them 
a 'gram about it, fussing that I won't do business with such a poorly 
protected site. I got an email from them the next Tuesday proclaiming 
their network guy had expanded the passwd length to 127 chars.  I like 
20+ chars personally as that would take John about the rest of the time 
for the universe to run down to find. But there are better tools for the 
specialists at hacking than John. Please keep that in mind.

-- 
Cheers, Gene Heskett
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page <http://geneslinuxbox.net:6309/gene>

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Password policy. peter@easthope.ca - 2018-11-13 18:10 +0100
  Re: Password policy. Reco <recoverym4n@enotuniq.net> - 2018-11-13 18:30 +0100
  Re: Password policy. Gene Heskett <gheskett@shentel.net> - 2018-11-13 18:50 +0100
    Re: Password policy. Reco <recoverym4n@enotuniq.net> - 2018-11-13 20:10 +0100
      Re: Password policy. Gene Heskett <gheskett@shentel.net> - 2018-11-13 22:50 +0100
        Re: Password policy. Reco <recoverym4n@enotuniq.net> - 2018-11-14 05:40 +0100
    Re: Password policy. peter@easthope.ca - 2018-11-13 21:00 +0100
      Re: Password policy. Dan Ritter <dsr@randomstring.org> - 2018-11-13 21:10 +0100
      Re (2): Password policy. peter@easthope.ca - 2018-11-13 22:20 +0100
        Re: Re (2): Password policy. Reco <recoverym4n@enotuniq.net> - 2018-11-14 05:40 +0100
  Re: Password policy. Brian <ad44@cityscape.co.uk> - 2018-11-13 19:20 +0100
  Re: Password policy. Jude DaShiell <jdashiel@panix.com> - 2018-11-13 19:40 +0100
    Re: Password policy. Reco <recoverym4n@enotuniq.net> - 2018-11-13 20:10 +0100
      Re: Password policy. Brian <ad44@cityscape.co.uk> - 2018-11-13 21:20 +0100
        Re: Password policy. peter@easthope.ca - 2018-11-14 03:40 +0100
  Re: Password policy. peter@easthope.ca - 2018-11-14 04:10 +0100
    Re: Password policy. Brian <ad44@cityscape.co.uk> - 2018-11-14 10:50 +0100
      Re: Password policy. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-11-14 11:30 +0100
        Re: Password policy. Corey Manshack <corey@manshack.me> - 2018-11-14 11:40 +0100
          Re: Password policy. Corey Manshack <corey@manshack.me> - 2018-11-14 12:30 +0100
            Re: Password policy. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-11-14 12:30 +0100
              Re: Password policy. Corey Manshack <corey@manshack.me> - 2018-11-14 13:20 +0100
                Re: Password policy. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-11-14 15:30 +0100
                Re: Password policy. Brad Rogers <brad@fineby.me.uk> - 2018-11-14 16:50 +0100
          Re: Password policy. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-11-14 12:30 +0100
        Re: Password policy. Brian <ad44@cityscape.co.uk> - 2018-11-14 12:20 +0100
          Re: Password policy. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-11-14 15:40 +0100
            Re: Password policy. Brian <ad44@cityscape.co.uk> - 2018-11-14 17:00 +0100
              Re: Password policy. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-11-14 17:50 +0100
                Re: Password policy. Brian <ad44@cityscape.co.uk> - 2018-11-14 21:30 +0100
              Re: Password policy. Richard Hector <richard@walnut.gen.nz> - 2018-11-15 01:10 +0100

csiph-web