RE: [[cobalt-users] Passwords (was: Server Hacked?)]

[Liz <daldog@xxxxxxxx>]

Not sure if this question has already been answered (just
got on this tread) but if the customer has access to change
their password, how does one enforce the customer to
continue use a strong password?

It seems to me that the only way to keep abreast of customer
elected password changes is to decrypt all passwords on a
regular basis in order to see how strong or weak they are
--- yes/no?

Liz


------Original Message------
From: "Tony" <isplists@xxxxxxxxxxxx>
To: cobalt-users@xxxxxxxxxxxxxxx
Sent: February 13, 2000 4:18:52 PM GMT
Subject: RE: [[cobalt-users] Server Hacked?]


This can happen on ANY machine. If you find a machine that's
hack-proof let
us know.
How could it happen? By not enforcing a strong password
policy is one way.
Perhaps
a user called joe with a password of joe. Once a hacker
finds something like
that he's
in your machine and the rest is simple. Make your users
choose strong
passwords.

______________________________________________
FREE Personalized Email at Mail.com
Sign up at http://www.mail.com?sr=mc.mk.mcm.tag001