Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!swrinde!zaphod.mps.ohio-state.edu!rpi!bu.edu!m2c!wpi.WPI.EDU!ear
From: ear@wpi.WPI.EDU (Eric A Rasmussen)
Newsgroups: comp.org.eff.talk
Subject: Re: Should we let students run COPS to get each other's passwords?
Message-ID: <1991Jun18.205523.30259@wpi.WPI.EDU>
Date: 18 Jun 91 20:55:23 GMT
References: <1991Jun14.193545.24869@athena.cs.uga.edu> <1991Jun17.144526.16230@ddsw1.MCS.COM> <27141@as0c.sei.cmu.edu>
Organization: Worcester Polytechnic Institute
Lines: 23

In article <27141@as0c.sei.cmu.edu> df@sei.cmu.edu (Dan Farmer) writes:
>In article <foo>, learn@ddsw1.MCS.COM (William Vajk) writes:
>> Misspellings are great. Classical words and terms not found in dictionaries
>> are just as good.
>
>  Not if you don't want to get broken into.  Larger, more comprehensive
>on line dictionaries are becoming easier to get access to.  *Any* word
>that is found in a dictionary can be easily guessed, whether it is an
>english or foreign language word/term.

I personally like to use words that are brand names or product names, but
which are not likely to be found in a dictionary.  For example, I used
'Mopar' as a password for a long time and never had any problems.  Of course,
I might be just as likely to use 'GlassPlus' the next time because there just
happens to be a bottle of it sitting near me.  The advantage is that these
types of passwords are easy to memorize, but hard for any automated password
checker to guess.

+---------< Eric A. Rasmussen - Mr. Neat-O (tm) >---------+ +< Email Address >+
|   A real engineer never reads the instructions first.   | | ear@wpi.wpi.edu |
|   (They figure out how it works by playing with it.)    | | ear%wpi@wpi.edu |
+---------------------------------------------------------+ +-----------------+
                     ((( In Stereo Where Available )))