From owner-freebsd-questions@FreeBSD.ORG Wed Jun 11 19:29:01 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A8D581065676 for ; Wed, 11 Jun 2008 19:29:01 +0000 (UTC) (envelope-from jos@webrz.net) Received: from webrz.xs4all.nl (webrz.xs4all.nl [82.95.248.216]) by mx1.freebsd.org (Postfix) with ESMTP id 4ABB48FC1A for ; Wed, 11 Jun 2008 19:29:01 +0000 (UTC) (envelope-from jos@webrz.net) Received: from webrz.xs4all.nl (localhost.webrz.net [127.0.0.1]) by webrz.xs4all.nl (Postfix) with ESMTP id 43AC1FD061 for ; Wed, 11 Jun 2008 21:29:12 +0200 (CEST) Received: from [10.10.10.27] (atlantis.webrz.net [10.10.10.27]) by webrz.xs4all.nl (Postfix) with ESMTP id 0E5CDFD05C for ; Wed, 11 Jun 2008 21:29:12 +0200 (CEST) Message-ID: <4850277C.209@webrz.net> Date: Wed, 11 Jun 2008 21:29:00 +0200 From: Jos Chrispijn User-Agent: Thunderbird 2.0.0.12 (Windows/20080213) MIME-Version: 1.0 To: freebsd-questions@freebsd.org References: <484F7CBE.5060401@lc-words.com> <20080611161436.GA9276@slackbox.xs4all.nl> <20080611163515.GA8032@ayn.mi.celestial.com> In-Reply-To: <20080611163515.GA8032@ayn.mi.celestial.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-AV-Checked: ClamAV using ClamSMTP @ prometheus.webrz.net Subject: Re: generating random passwords X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Jun 2008 19:29:01 -0000 Bill Campbell wrote: > I much prefer apg which can generate more-or-less pronounceable > passwords which it is possible to remember (at least after typing > them a few times :-). > This is not supposed to be an offense to any author of a password generator, but: Never, but never trust any random password generator. You do not know the author, you do not know the algoritm it uses and in worst case scenarion you do not know if there is a millisecond traffic to somewhere that is recording the generated password. > One of the biggest problems with random passwords is that they > end up written on yellow-stickies on the monitor or under the > keyboard. > You don't need a generated password for that; it is common behaviour for people that aren't involved in any responsibility whatsoever. Jos