<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: I Hate the Password Policy!</title>
	<atom:link href="http://blogs.mcafee.com/mcafee-labs/2006/06/30/i-hate-the-password-policy!/feed" rel="self" type="application/rss+xml" />
	<link>http://blogs.mcafee.com/mcafee-labs/i-hate-the-password-policy</link>
	<description></description>
	<lastBuildDate>Tue, 29 Nov 2011 07:51:20 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: Steve</title>
		<link>http://blogs.mcafee.com/mcafee-labs/i-hate-the-password-policy/comment-page-1#comment-5427</link>
		<dc:creator>Steve</dc:creator>
		<pubDate>Tue, 19 Jan 2010 17:46:17 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com/?p=47#comment-5427</guid>
		<description>..but this only works as long as you always log from the same type of keyboard. If you switch between US and UK or other keyboard layouts (for example if you travel), the results of the pattern will differ with each keyboard. Even PC and Mac for the same region keyboards are slightly different from each other.</description>
		<content:encoded><![CDATA[<p>..but this only works as long as you always log from the same type of keyboard. If you switch between US and UK or other keyboard layouts (for example if you travel), the results of the pattern will differ with each keyboard. Even PC and Mac for the same region keyboards are slightly different from each other.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: TechnoMike</title>
		<link>http://blogs.mcafee.com/mcafee-labs/i-hate-the-password-policy/comment-page-1#comment-5425</link>
		<dc:creator>TechnoMike</dc:creator>
		<pubDate>Fri, 17 Oct 2008 14:14:32 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com/?p=47#comment-5425</guid>
		<description>I am reminded that I once worked for an employer that did not allow 3 adjacent keys could to be used in consecutive order on the keyboard for a password!

So ASD, 123, bnm, der and kij were not allowed.

You are only limited by the parameters that dictate the &quot;standards&quot; for your system or organization.</description>
		<content:encoded><![CDATA[<p>I am reminded that I once worked for an employer that did not allow 3 adjacent keys could to be used in consecutive order on the keyboard for a password!</p>
<p>So ASD, 123, bnm, der and kij were not allowed.</p>
<p>You are only limited by the parameters that dictate the &#8220;standards&#8221; for your system or organization.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Lobna Abdelaziz</title>
		<link>http://blogs.mcafee.com/mcafee-labs/i-hate-the-password-policy/comment-page-1#comment-5424</link>
		<dc:creator>Lobna Abdelaziz</dc:creator>
		<pubDate>Wed, 30 Jan 2008 12:15:16 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com/?p=47#comment-5424</guid>
		<description>Hey Jimmy Kuo, you rocks!

That was a great innovative way to generate passwords. Thanks man.

Lobna M I Abdelaziz</description>
		<content:encoded><![CDATA[<p>Hey Jimmy Kuo, you rocks!</p>
<p>That was a great innovative way to generate passwords. Thanks man.</p>
<p>Lobna M I Abdelaziz</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: zohair</title>
		<link>http://blogs.mcafee.com/mcafee-labs/i-hate-the-password-policy/comment-page-1#comment-5423</link>
		<dc:creator>zohair</dc:creator>
		<pubDate>Wed, 30 Jan 2008 05:05:58 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com/?p=47#comment-5423</guid>
		<description>This method will most likely generate only a limited subset of passwords. Once the method catches on, people will know what to look for. Keyboard layouts usually don&#039;t change. And once people know, this password will be very easy to crack.
You might be able to fool corporate strength checks this way, but I don&#039;t think this will fool dedicated crackers for long. There simply aren&#039;t enough permutations.</description>
		<content:encoded><![CDATA[<p>This method will most likely generate only a limited subset of passwords. Once the method catches on, people will know what to look for. Keyboard layouts usually don&#8217;t change. And once people know, this password will be very easy to crack.<br />
You might be able to fool corporate strength checks this way, but I don&#8217;t think this will fool dedicated crackers for long. There simply aren&#8217;t enough permutations.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: lindabonita</title>
		<link>http://blogs.mcafee.com/mcafee-labs/i-hate-the-password-policy/comment-page-1#comment-5422</link>
		<dc:creator>lindabonita</dc:creator>
		<pubDate>Tue, 29 Jan 2008 20:26:28 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com/?p=47#comment-5422</guid>
		<description>My husband uses children&#039;s nursery rhymes; eg old king cole was a very merry old soul.  Keep them long (14 -16 characters), sprinkle #, caps &amp; symbols and--voila oodles of p_sswords=:)
lb</description>
		<content:encoded><![CDATA[<p>My husband uses children&#8217;s nursery rhymes; eg old king cole was a very merry old soul.  Keep them long (14 -16 characters), sprinkle #, caps &amp; symbols and&#8211;voila oodles of p_sswords=:)<br />
lb</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: george</title>
		<link>http://blogs.mcafee.com/mcafee-labs/i-hate-the-password-policy/comment-page-1#comment-5421</link>
		<dc:creator>george</dc:creator>
		<pubDate>Tue, 29 Jan 2008 09:01:17 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com/?p=47#comment-5421</guid>
		<description>my password system

 I dont have a worry  i tell every body what my password is

 yes everyone knows my password for the month  and  i  can

 tell you what it is too  if you wish   :)    what i wont tell you is what

 language  dictionary i got the    translation from   or which language i am using that month

 same password always   and switch languages  this month

 is japanese..

                                                                     regards
                                                                      george</description>
		<content:encoded><![CDATA[<p>my password system</p>
<p> I dont have a worry  i tell every body what my password is</p>
<p> yes everyone knows my password for the month  and  i  can</p>
<p> tell you what it is too  if you wish   <img src='http://blogs.mcafee.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />     what i wont tell you is what</p>
<p> language  dictionary i got the    translation from   or which language i am using that month</p>
<p> same password always   and switch languages  this month</p>
<p> is japanese..</p>
<p>                                                                     regards<br />
                                                                      george</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Cat Allen</title>
		<link>http://blogs.mcafee.com/mcafee-labs/i-hate-the-password-policy/comment-page-1#comment-5420</link>
		<dc:creator>Cat Allen</dc:creator>
		<pubDate>Tue, 29 Jan 2008 08:25:23 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com/?p=47#comment-5420</guid>
		<description>Sid, the picture is now missing, but if you use a standard American keyboard, you&#039;ll see the pattern.

Look at the number 7 on your keyboard. Now trace down the keyboard, the letter under 7 is u, then there&#039;s j and then m.
He&#039;s said you&#039;re using a J shape, so we need to go down the keyboard, then to the left two letters and up one.  Try it on a US keyboard and you get 7ujm(downtrace)nb(two left)g(one up)

Then he&#039;s starting at 5, making a straight line down. Your keys are offset, so it won&#039;t be vertical, it&#039;ll be slightly right-leading.  5tgb

If we use the same idea, but starting with 8 and then 2, we would have 8ik,mnh  and  2wsx

Another method would be to use a diamond shape.  Say we start at x, the diamond would be xsedx.  Clearer now?

It&#039;s a cool idea, as long as no one ever watches you type.  As soon as they do, they have this and all future passwords.</description>
		<content:encoded><![CDATA[<p>Sid, the picture is now missing, but if you use a standard American keyboard, you&#8217;ll see the pattern.</p>
<p>Look at the number 7 on your keyboard. Now trace down the keyboard, the letter under 7 is u, then there&#8217;s j and then m.<br />
He&#8217;s said you&#8217;re using a J shape, so we need to go down the keyboard, then to the left two letters and up one.  Try it on a US keyboard and you get 7ujm(downtrace)nb(two left)g(one up)</p>
<p>Then he&#8217;s starting at 5, making a straight line down. Your keys are offset, so it won&#8217;t be vertical, it&#8217;ll be slightly right-leading.  5tgb</p>
<p>If we use the same idea, but starting with 8 and then 2, we would have 8ik,mnh  and  2wsx</p>
<p>Another method would be to use a diamond shape.  Say we start at x, the diamond would be xsedx.  Clearer now?</p>
<p>It&#8217;s a cool idea, as long as no one ever watches you type.  As soon as they do, they have this and all future passwords.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: SirFrisco</title>
		<link>http://blogs.mcafee.com/mcafee-labs/i-hate-the-password-policy/comment-page-1#comment-5419</link>
		<dc:creator>SirFrisco</dc:creator>
		<pubDate>Tue, 29 Jan 2008 08:03:09 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com/?p=47#comment-5419</guid>
		<description>Love the ideas on how to create (and remember) secure passwords.  I have used the same passwords for years for every single account and I know that&#039;s just asking for trouble.  Now I have no excuse not to go in and change all them.</description>
		<content:encoded><![CDATA[<p>Love the ideas on how to create (and remember) secure passwords.  I have used the same passwords for years for every single account and I know that&#8217;s just asking for trouble.  Now I have no excuse not to go in and change all them.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anne</title>
		<link>http://blogs.mcafee.com/mcafee-labs/i-hate-the-password-policy/comment-page-1#comment-5418</link>
		<dc:creator>Anne</dc:creator>
		<pubDate>Mon, 28 Jan 2008 23:28:35 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com/?p=47#comment-5418</guid>
		<description>Hey Sid, Go back and look at the article again.  I found it very simple and creative.  I am a newbie grandmother (over 65) and have wondered how to have unique passwords that I could remember.  This is wonderful.  Anne</description>
		<content:encoded><![CDATA[<p>Hey Sid, Go back and look at the article again.  I found it very simple and creative.  I am a newbie grandmother (over 65) and have wondered how to have unique passwords that I could remember.  This is wonderful.  Anne</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: OnLooker</title>
		<link>http://blogs.mcafee.com/mcafee-labs/i-hate-the-password-policy/comment-page-1#comment-5417</link>
		<dc:creator>OnLooker</dc:creator>
		<pubDate>Mon, 28 Jan 2008 19:32:22 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com/?p=47#comment-5417</guid>
		<description>No, however there is a super easy solution to this issue.

Micro Star International (motherboards) Password Keeper is the answer IMO and allows the user to store unlimited passwords and account information encrypted for safe keeping.

The user only needs to remember one single password for access to Password Keeper itself, and because this is a personal client side password, it NEVER gets entered into any internet/web based applications.

Of course the since this password only gets used for Password Keeper you could use a very simple one word password that is undeniably burned into your brain already:

By choosing a super simple pre-burned in memory (in your head that is) password for the Password Keeper you will likely not even have to write it down.

Or alternatively a more secure but still easy to remember pass could be constructed like this for Password Keeper.

Example1: My Chocolate Lab Has 100 Fleas (MCLH100F)
Example2: I Own A Black Chevy 4 Door (IOaBC4D)

This is the same functionally as MSI&#039;s Password Keeper found on Blackberry&#039;s and other pda cell phones.

http://download1.msi.com.tw/files/downloads/uti_exe/PasswordKeeper.zip

Best Regards, OnLooker</description>
		<content:encoded><![CDATA[<p>No, however there is a super easy solution to this issue.</p>
<p>Micro Star International (motherboards) Password Keeper is the answer IMO and allows the user to store unlimited passwords and account information encrypted for safe keeping.</p>
<p>The user only needs to remember one single password for access to Password Keeper itself, and because this is a personal client side password, it NEVER gets entered into any internet/web based applications.</p>
<p>Of course the since this password only gets used for Password Keeper you could use a very simple one word password that is undeniably burned into your brain already:</p>
<p>By choosing a super simple pre-burned in memory (in your head that is) password for the Password Keeper you will likely not even have to write it down.</p>
<p>Or alternatively a more secure but still easy to remember pass could be constructed like this for Password Keeper.</p>
<p>Example1: My Chocolate Lab Has 100 Fleas (MCLH100F)<br />
Example2: I Own A Black Chevy 4 Door (IOaBC4D)</p>
<p>This is the same functionally as MSI&#8217;s Password Keeper found on Blackberry&#8217;s and other pda cell phones.</p>
<p>http://download1.msi.com.tw/files/downloads/uti_exe/PasswordKeeper.zip</p>
<p>Best Regards, OnLooker</p>
]]></content:encoded>
	</item>
</channel>
</rss>

