[BlueOnyx:06924] Re: Disable Strong Passwords

[PM]

yeah !!

still badly paid and little thanks for it.


  ----- Original Message ----- 
  From: Roy Urick 
  To: 'BlueOnyx General Mailing List' 
  Sent: Thursday, April 07, 2011 3:08 PM
  Subject: [BlueOnyx:06923] Re: Disable Strong Passwords


  When it comes to end users, babysitting is required unfortunately. 

   

  From: blueonyx-bounces at blueonyx.it [mailto:blueonyx-bounces at blueonyx.it] On Behalf Of PM
  Sent: Thursday, April 07, 2011 9:37 AM
  To: BlueOnyx General Mailing List
  Subject: [BlueOnyx:06920] Re: Disable Strong Passwords

   

  And there again I can get by with short local place names.  Secure??? I think not

   

  Wondering who decided this???

   

  This  type of 'baby sitting' is creeping into BO more and more under the banner of 'security'

   

   

   

    ----- Original Message ----- 

    From: Tjerk Hacquebord 

    To: 'BlueOnyx General Mailing List' 

    Sent: Thursday, April 07, 2011 2:12 PM

    Subject: [BlueOnyx:06919] Re: Disable Strong Passwords

     

    That's exactly my problem with this implementation of the password check.

    If only somewhere in the password there is a part of a dictionary word it will deny the password while this password could be very very safe.

    Not the first topic about it..

     

     

    Van: blueonyx-bounces at blueonyx.it [mailto:blueonyx-bounces at blueonyx.it] Namens Chris Comley
    Verzonden: donderdag 7 april 2011 14:56
    Aan: 'BlueOnyx General Mailing List'
    Onderwerp: [BlueOnyx:06918] Re: Disable Strong Passwords

     

    Pisses me off when I base a password *around* a word (to make it easier to remember than plain garbage) and it *insists* it's a dictionary based word. I mean something like "Fred&44Bloggs!+" which, face it, you're never going to guess, and it's never going to be found by a dictionary attack. 

     

    From: blueonyx-bounces at blueonyx.it [mailto:blueonyx-bounces at blueonyx.it] On Behalf Of Doug Harvey
    Sent: 07 April 2011 13:35
    To: BlueOnyx General Mailing List
    Subject: [BlueOnyx:06917] Re: Disable Strong Passwords

     

    I like the strong passwords. I just have one complaint.  If I enter a password: jj%123456&abcdef or something similar, the system will reject it calling it a weak password.  If I enter something like: K12345, then the system will call it a strong password.

    Doug

    On Thu, Apr 7, 2011 at 1:16 AM, Ken - Precision Web Hosting, Inc <kenlists at precisionweb.net> wrote:


    ----- Original Message -----
    From: "User Ernie" <ernie at info.eis.net.au>
    To: <blueonyx at blueonyx.it>
    Sent: Wednesday, April 06, 2011 9:34 PM
    Subject: [BlueOnyx:06914] Re: Disable Strong Passwords


    > There is nothing wrong with the system suggesting if a password is strong
    > or
    > weak in the programmers opinion, however a site administrator should
    > still be able to set what password they want.  If a person can't remeber a
    > password because it's too hard, then they will either set it to auto
    > entry,
    > or write it down on a postit note or something equally insecure.
    >
    > BlueOnyx already locks out dictionary and other brute force attacks quite
    > well.
    >
    >
    > - Ernie.
    >

    It's really a pain to have to get yourself off of blacklists because of
    user=sales password=sales.  Then the servers spams all night and you see it
    in the morning.

    Email software already remembers the passwords. Even the webmail can be set
    to remember.

    >>brute force attacks
    If the password is too easy, then it takes so few tries to guess it, that
    they are not blocked. I've had that happen multiple times.

    ----
    Ken M
    Precision Web Hosting, Inc.
    http://www.precisionweb.net






    _______________________________________________
    Blueonyx mailing list
    Blueonyx at blueonyx.it
    http://www.blueonyx.it/mailman/listinfo/blueonyx

     


----------------------------------------------------------------------------

    _______________________________________________
    Blueonyx mailing list
    Blueonyx at blueonyx.it
    http://www.blueonyx.it/mailman/listinfo/blueonyx


    ­­  


------------------------------------------------------------------------------


  _______________________________________________
  Blueonyx mailing list
  Blueonyx at blueonyx.it
  http://www.blueonyx.it/mailman/listinfo/blueonyx
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20110407/4b9e25bf/attachment.html>