West Lothian and email
Brian L Johnson
ukcrypto at chiark.greenend.org.uk
Fri, 16 Jan 2009 07:59:05 -0000
<signup@bealoid.co.uk> wrote:
> There's probably some research showing that written passphrases are
> remembered more easily than forced-strong passwords. Or that people
> find it trivial to turn a forced strong password into something weak.
See below.
> Turns out the local MH trust have laptops encrypted with MacAffee
> endpoint encryption, with strict protocols about not logging in with
> someone else's password. (Which was understood and obeyed from the tiny
> bit I saw.) So, thaat's a re-assuring bit of information.
But I wonder how the passwords were created? From my limited experience, I have a feeling that once one person in the office has a good 'scheme' for remembering strong passwords, it tends to propogate ("Ooh! That's a good idea!") around the office/dept. Passwords which 'the IT chap' insists have to be mixed-case and include digits and special characters tend to end up with the same pattern. A pattern like Abcd+1234 would not be uncommon.
--
-blj-