Eight is too many characters for strong passwords

Eight may be a good number at the craps table in Las Vegas, but it is the worst number for a minimum password length. Seven is the best password length, but passphrases may be your best option. (See SecurityFocus.com for details on the weakness of the LanMan password hash.)

Because of human nature, a policy that requires "password complexity" and a minimum password length of eight will result in the majority of users picking passwords that are exactly eight characters long. The complexity part -- usually a number or special character -- often ends up as the eighth character of the password. This complex eight-character password becomes two passwords: a seven-character, all-uppercase alphabetical password, and a one-character number or special-character password.

When a computer stores the LanMan hash for this password, it first makes the characters uppercase, then chops the password into two, seven-byte halves: "SNOWMAN" and "!" (Note: The LanMan hash is not stored by default on Vista and Windows 7 systems).

know more : lanman server

Comments

Post a Comment

Popular posts from this blog

what are the causes to Improve Network Security

  Companies that face concerns about the electronic information they compile, analyze,and share to drive their business need comprehensive solutions for improving network security. With concerns about network security running at an all-time high, along with the limited number of IT personnel capable of addressing them, an increasing number of companies are realizing how outsourcing to managed service providers (MSPs) can strengthen their security posture, reduce hassles and save money. MSPs looking to cash in on these opportunities face their own challenges of how to provide premium offerings to the broadest markets and verticals without having to balance or customize offerings for each client’s unique service and compliance requirements. They also need a way to differentiate themselves from peers and competitors who are also trying to get a piece of this crowded and lucrative pie. find more :   security engineer C
Read more

Python: High Programming Language in the Market

Those who live or study IT job market trends have certainly heard of - or even used - the Python language. This is a dynamic, powerful and multiplatform language that is ready to run on the JVM and .NET Framework. Created and launched by Guido van Rossum, Python is a free language, including for commercial projects, and today it can be programmed for desktops, web and mobile. According to some research, Python is already among the four languages ​​most used by programmers, second only to Java, C and C ++. But if just thinking about learning to program already gets a headache, know that there is a language that was made for you. And its name is Python. Programming in Python is ideal for a wide range of audiences - whether you are an experienced IT professional, a universe enthusiast, or a learning student. You don't know much about it but have a project to develop and need a helping hand in programming languages? The answer to what you are looking for is Python. She is high le
Read more

History of Network Operating Systems

Nowadays, practically every personal computer is connected in one form or another to a network. There exists of course the biggest network of all —the Internet— but several other types of smaller networks like LANs (local area networks) and enterprise networks also exist. Network operating systems (NOS) serve as gatekeepers to data and applications on all manner of these networks. Network operating systems don't differ too much from the single-processor operating systems almost every computer user is familiar with, says Andrew Tannenbaum in his book "A History of Operating Systems", but they have their own unique, fascinating history. Birth of Networks The concept of data communications between computers began in the late 1960s and early 1970s, when researchers began developing a way of connecting computers and exchanging information by way of packets of data. Soon, the concept of a local area network (LAN) took hold, replacing the previous model of a central computin
Read more