Re: Password Cracking & Consequences

[Melissa Guenther <mguenther () COX NET>]

I've heard of it being done frequently as 1) an auditing tool  2) as an
awareness exercise (for the unbelievers as to how easy and little time it
takes to crack a bad password) 3) as a metrics tool for assessing results.
Both in academia and corporate.
----- Original Message -----
From: "Sweeny, Jonny" <jsweeny () INDIANA EDU>
To: <SECURITY () LISTSERV EDUCAUSE EDU>
Sent: Thursday, August 26, 2004 1:24 PM
Subject: Re: [SECURITY] Password Cracking & Consequences


Do IT departments commonly try to crack their users' passwords?

That's surprising/scary news to me...

~Jonny

-----Original Message-----
From: The EDUCAUSE Security Discussion Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Jason Brooks
Sent: Thursday, August 26, 2004 3:01 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Password Cracking & Consequences

We are looking for any advice on the consequences other institutions
impose
on faculty and staff when their password is cracked by IT.  For
instance, is
it a zero-tolerance system where your password is automatically reset
and
you must show up at the Helpdesk to have it reset?  Or, is it a
graduated
series of consequences, a la "Three Strikes and You're Out,"  e.g.,
disciplinary action, network restrictions, etc.  Any other
configurations?

Anything anyone could provide would be helpful.  Trying not to reinvent
the
wheel!

Jason Brooks

Jason Brooks
Information Security Technician
Longwood University
201 High Street
Farmville, VA 23909
(434) 395-2034
mailto:brooksje () longwood edu

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.