West Lothian and email

Brian L Johnson ukcrypto at chiark.greenend.org.uk
Fri, 16 Jan 2009 07:59:05 -0000


 <signup@bealoid.co.uk> wrote:

> There's probably some research showing that written passphrases are  
> remembered more easily than forced-strong passwords.  Or that people  
> find it trivial to turn a forced strong password into something weak.

See below.

> Turns out the local MH trust have laptops encrypted with MacAffee  
> endpoint encryption, with strict protocols about not logging in with  
> someone else's password.  (Which was understood and obeyed from the tiny  
> bit I saw.)  So, thaat's a re-assuring bit of information.

But I wonder how the passwords were created?  From my limited experience, I have a feeling that once one person in the office has a good 'scheme' for remembering strong passwords, it tends to propogate ("Ooh! That's a good idea!") around the office/dept.  Passwords which 'the IT chap' insists have to be mixed-case and include digits and special characters tend to end up with the same pattern.  A pattern like Abcd+1234 would not be uncommon.

-- 
-blj-