Old Passwords!

[slowRodeo]

I have had some great old passwords that i can't use anymore because someone found them out or i forgot them. but i thought i should share because i usually spend alot of time thinking of good passwords. i also tend to go for the random word or phrase rather then something i can remember unfortunetly.

some good ones i've used in the past:
ilikecoke
charliebrown
lhooqlhooq
nooneknowsmypassword
fortytwo

and the like.

feel free to share and maybe you can give me some good ideas.

[Kill Me Sarah]

I have had some great old passwords that i can't use anymore because someone found them out or i forgot them. but i thought i should share because i usually spend alot of time thinking of good passwords. i also tend to go for the random word or phrase rather then something i can remember unfortunetly.

some good ones i've used in the past:
ilikecoke
charliebrown
lhooqlhooq
nooneknowsmypassword
fortytwo

and the like.

feel free to share and maybe you can give me some good ideas.

I tend to like passwords that can be typed using only my left hand so that I never have to take my right hand off the mouse.

wares
sewer
reeses
saver
fare
etc

and of course the numbers 1-6 are easily reachable w/ one hand.

[c.layne]

so that I never have to take my right hand off the mouse.

rrrrrrrrrrrrrrrrrriiiiiiiiight

[Kill Me Sarah]

so that I never have to take my right hand off the mouse.

rrrrrrrrrrrrrrrrrriiiiiiiiight

I saw that coming and proceeded anyway.

[jb]

I have had some great old passwords that i can't use anymore because someone found them out or i forgot them.

those *are* great passwords

[Eric Y.]

I have had some great old passwords that i can't use anymore because ... i forgot them. but i thought i should share.

how does this work??

[c.layne]

so that I never have to take my right hand off the mouse.

rrrrrrrrrrrrrrrrrriiiiiiiiight

I saw that coming and proceeded anyway.

heheheh

[Sober]

"One, two, three, four, five."

[jb]

An article about making good passwords. Written by somebody YOU KNOW.

http://www.earthlink.net/elink/issue67/ ... chive.html

[blue]

i have about 7 for work alone, and, being a security company, they expire them about once a week. even better, the published rules for acceptable passwords are not the actual rules for creating passwords, so it's basically a 20 minute guessing game each time.

it is a freaking nightmare.

[rone rivendale]

"One, two, three, four, five."

LMAO, okie dude. I offically like you. Anyone who uses a Spaceballs reference is kewl in my book.

[slowRodeo]

I have had some great old passwords that i can't use anymore because ... i forgot them. but i thought i should share.

how does this work??

well i tell the site my email address and my mother's madien name or whatever and they email me my password or let me pick a new one and i can't use the old one anymore.

[roymond]

i have about 7 for work alone, and, being a security company, they expire them about once a week. even better, the published rules for acceptable passwords are not the actual rules for creating passwords, so it's basically a 20 minute guessing game each time.

it is a freaking nightmare.

I worked for Bertelsmann for a short while, and the division I was in required everyone change their passwords once a month (most had multiple). They did the old "8 characters with at least 2 digits" scheme. You also couldn't create serial passwords (password1, password2, etc.). This was for an internal system with no access from outside, but once logged in users have pretty open access (that is, it was role-based, not user-based security). In this type of environment your enemy isn't someone who needs to figure out someone's password, it's someone who has a password and wants to screw around with things.

I asked how many times they have ever had a breach. They said none. I asked how many requests the help desk gets for forgotten passwords. They said hundreds a month. I asked why they felt such a password system was necessary. They asked why I cared. I pointed out that most people juggle 12 passwords (work and personal) at least. They still didn't understand why it wasn't a good thing that people had to call the help desk on a regular basis to reset their passwords. I pointed out that the help desk takes two weeks to respond to a corrupt file restore request within a three week production cycle and that perhaps there are better things to worry about. This had no impact, and pretty much represented the general business culture at what was soon my former employer.

[Mostess]

So I read this thread and start thinking..."I wonder if anyone has..." and then my mental representation of blue interrupts and says "Google, n00b!" And voila:

http://weblog.infoworld.com/udell/2005/05/03.html

Now I wonder if anyone has made a version that xor's your "master" password against some pseudo-random key designed to ensure certain types of passwords (no fewer than 6 characters including at least 2 digits and one punctuation, for instance), so that you can make a new key every time you need to update your password, but leave your "master" unchanged. Maybe different keys for different purposes, constraints, or update schedules...(I know, I know, Mr. blue. You're almost as bad as my mental representation of my boss!)

[fluffy]

An article about making good passwords. Written by somebody YOU KNOW.

http://www.earthlink.net/elink/issue67/ ... chive.html

Sweet.

[roymond]

An article about making good passwords. Written by somebody YOU KNOW.

http://www.earthlink.net/elink/issue67/ ... chive.html

So, if I use the first letters of the song fight titles that straddle the first of the month, I can confidently change my passwords every month. As long as Songfight is up...OMG, I am once again being manipulated by the oppressive rulers!

No, but seriously good article my man.