[BlueOnyx:06917] Re: Disable Strong Passwords

[Doug Harvey]

I like the strong passwords. I just have one complaint.  If I enter a
password: jj%123456&abcdef or something similar, the system will reject it
calling it a weak password.  If I enter something like: K12345, then the
system will call it a strong password.

Doug



On Thu, Apr 7, 2011 at 1:16 AM, Ken - Precision Web Hosting, Inc <
kenlists at precisionweb.net> wrote:

>
> ----- Original Message -----
> From: "User Ernie" <ernie at info.eis.net.au>
> To: <blueonyx at blueonyx.it>
> Sent: Wednesday, April 06, 2011 9:34 PM
> Subject: [BlueOnyx:06914] Re: Disable Strong Passwords
>
>
> > There is nothing wrong with the system suggesting if a password is strong
> > or
> > weak in the programmers opinion, however a site administrator should
> > still be able to set what password they want.  If a person can't remeber
> a
> > password because it's too hard, then they will either set it to auto
> > entry,
> > or write it down on a postit note or something equally insecure.
> >
> > BlueOnyx already locks out dictionary and other brute force attacks quite
> > well.
> >
> >
> > - Ernie.
> >
>
> It's really a pain to have to get yourself off of blacklists because of
> user=sales password=sales.  Then the servers spams all night and you see it
> in the morning.
>
> Email software already remembers the passwords. Even the webmail can be set
> to remember.
>
> >>brute force attacks
> If the password is too easy, then it takes so few tries to guess it, that
> they are not blocked. I've had that happen multiple times.
>
> ----
> Ken M
> Precision Web Hosting, Inc.
> http://www.precisionweb.net
>
>
>
>
>
> _______________________________________________
> Blueonyx mailing list
> Blueonyx at blueonyx.it
> http://www.blueonyx.it/mailman/listinfo/blueonyx
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20110407/cf96f059/attachment.html>