[ale] password management

[jonathan at xcorps.net (Jonathan Rickman)]

On Wednesday 23 July 2003 12:00, J.M. Taylor wrote:

> Re Jonathan's mnemonics...couldn't I then use your hostname in a
> customized brute-force attack?  Or is the length and complexity of the
> password enough to foil that kind of thing?

Internal hostnames are not always the same as published dns records. 
Insiders might have a slight edge, but they would have to know that you are 
actually using the hostname. I do not actually use the hostname. Just 
providing an example. 

-- 
Jonathan Rickman
X Corps Security
http://www.xcorps.net


_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale