Re: suggesting passwds to users

[hggdh <hggdh2 () gmail com>]

What I see here is user reality. Random data has two very strong properties;

1. it is random

2. nobody can remember it.

So, by giving an user random passwords, you now incur the risk of the
user writing the new, improved, passowrd on a post-it, and sticking it
on a safe and easy to reach place.

End result: you are now more vulnerable...

On 4/19/05, Matt Fisher <mfisher () spidynamics com> wrote:
> The first thing I think of in this scenario is what "random" means.  I
> don't know that much about rand generators, but I do know that some have
> been flawed, and presented not-so-random numbers.

-- 
..hggdh..