password aging (was Re: virulence of the recent virus)


C. Harald Koch (attcan!utzoo!dciem!dretor!chk@uunet.uu.net)
15 Nov 88 23:27:41 GMT


In article <In article <1988Nov8.224853.16081@utzoo.uucp> In article <1988Nov8.224853.16081@utzoo.uucp> henry@utzoo.uucp (Henry Spencer) writes:
>In article <6704@venera.isi.edu> cracraft@venera.isi.edu (Stuart Cracraft) writes:
>>... If you enable aging, for example, once every
>>month or two, every user who logs into your system will be required
>>to specify a new password.
>
>On the spur of the moment, which means that he often will make up a poor
>password, or simply alternate between two passwords.

On a system somewhere that aged passwords at the beginning of each month,
it was found that many users used the name of the month as their password
to make it easy to remember.

        -chk

--
C. Harald Koch		NTT Systems, Inc., Toronto, Ontario
chk@zorac.dciem.dnd.ca,	chk@gpu.utcs.toronto.edu, chk@chk.mef.unicus.com
Note: some sites may still have	zorac.dciem.dnd.ca as zorac.ARPA.
"I give	you my phone number. If	you worry, call	me. I'll make you happy."



This archive was generated by hypermail 2.0b3 on Thu Mar 09 2000 - 14:44:54 GMT