{"id":631,"date":"2007-08-03T21:41:41","date_gmt":"2007-08-03T20:41:41","guid":{"rendered":"http:\/\/www.craigmurphy.com\/blog\/?p=631"},"modified":"2007-08-03T22:32:53","modified_gmt":"2007-08-03T21:32:53","slug":"password-security-even-big-names-fail","status":"publish","type":"post","link":"http:\/\/www.craigmurphy.com\/blog\/?p=631","title":{"rendered":"Password security – even big names fail"},"content":{"rendered":"

Great mate Barry<\/a> and I did a podcast yesterday. In and around the podcast, we chatted about password security, a subject not missed by fellow great mate Alan<\/a> – he’s a great fan of pass phrases (i.e. a sentence instead of a single word). So yesterday, whilst in London, Barry picked up an Oyster card application form – I’m kind of interested in getting one, if only to maintain the stereotype of a Scotsman (although Mr Smeaton<\/a> has changed that!) <\/p>\n

Imagine my surprise at reading section 3. Password:<\/p>\n

<\/p>\n

What’s this all about? A password is now called an answer<\/strong>. The password can’t be longer than 18 characters and cannot use spaces or punctuation? Adding a space or two and some punctuation is the first step to making a strong or secure <\/strong>password. Limiting it to 18 characters, including numerical values, rules out pass phrases<\/strong> (which are harder to guess and less prone to dictionary attacks). But, the other answers on this part of the form, can include spaces. Your mother’s maiden name? Does it have spaces? <\/p>\n

Better wording of this question and more flexibility for the password are required…surely?<\/p>\n

Technorati Tags: password<\/a>, passwords<\/a>, password security<\/a>, password insecurity<\/a>, passphrase<\/a>, pass phrase<\/a>, passphrases<\/a>, pass phrases<\/a>, oyster<\/a>, oyster card<\/a>, Barry Dorrans<\/a>, Alan Henderson<\/a>, blackhatspider<\/a>, idunno<\/a>, dictionary attacks<\/a>, johnsmeaton.com<\/a>, john smeaton<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Great mate Barry and I did a podcast yesterday. In and around the podcast, we chatted about password security, a subject not missed by fellow great mate Alan – he’s a great fan of pass phrases (i.e. a sentence instead of a single word). So yesterday, whilst in London, Barry picked up an Oyster card … Continue reading Password security – even big names fail<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21],"tags":[],"class_list":["post-631","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"http:\/\/www.craigmurphy.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/631","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.craigmurphy.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.craigmurphy.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.craigmurphy.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.craigmurphy.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=631"}],"version-history":[{"count":0,"href":"http:\/\/www.craigmurphy.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/631\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.craigmurphy.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=631"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.craigmurphy.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=631"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.craigmurphy.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=631"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}