Re: Password Cracking & Consequences

[James Riden <j.riden () MASSEY AC NZ>]

"Sweeny, Jonny" <jsweeny () INDIANA EDU> writes:

> Do IT departments commonly try to crack their users' passwords?

At least one place I've studied at has run John/crack on their UNIX
password files. John even has an option to mail the user and ask them
to change their password I think.

I suppose this is because a password may meet the minimum standards
and yet still be too obvious, e.g "aaAA11!!"

--
James Riden / j.riden () massey ac nz / Systems Security Engineer
Information Technology Services, Massey University, NZ.
GPG public key available at: http://www.massey.ac.nz/~jriden/

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.