Comments on: Weak passwords – curable with pam_cracklib http://www.ratliff.net/blog/2009/04/12/weak-passwords-%e2%80%93-curable-with-pam_cracklib/ A blog about open source and security and open source security Wed, 18 Aug 2010 15:12:50 +0000 hourly 1 http://wordpress.org/?v=3.0.1 By: George Wilson http://www.ratliff.net/blog/2009/04/12/weak-passwords-%e2%80%93-curable-with-pam_cracklib/comment-page-1/#comment-3622 George Wilson Mon, 13 Apr 2009 23:59:04 +0000 http://www.ratliff.net/blog/?p=125#comment-3622 Hi Bryan, Thanks for the informative post. Folks should know better than to use trivial passwords but we all seem to need constant reminding. pam_cracklib is certainly helpful for improving passwords. You might also want to make use of the pam_passwdqc (password quality check) module [http://linux.die.net/man/8/pam_passwdqc]. There is overlap with pam_cracklib's functionality. But pam_passwdqc allows you to enforce some additional characteristics, particularly for passphrases. Regards, George Wilson Hi Bryan,

Thanks for the informative post. Folks should know better than to use trivial passwords but we all seem to need constant reminding. pam_cracklib is certainly helpful for improving passwords. You might also want to make use of the pam_passwdqc (password quality check) module [http://linux.die.net/man/8/pam_passwdqc]. There is overlap with pam_cracklib’s functionality. But pam_passwdqc allows you to enforce some additional characteristics, particularly for passphrases.

Regards,
George Wilson

]]> By: Emily Ratliff http://www.ratliff.net/blog/2009/04/12/weak-passwords-%e2%80%93-curable-with-pam_cracklib/comment-page-1/#comment-3621 Emily Ratliff Mon, 13 Apr 2009 14:48:48 +0000 http://www.ratliff.net/blog/?p=125#comment-3621 Hi Bryan, Thanks for leading off the guest blog entries! Dark Reading also had a recent article about analyzing passwords used on phpbb.com which shown that passwords have not really improved all that much since 2006! See http://www.darkreading.com/blog/archives/2009/02/phpbb_password.html Thanks for posting this useful info! Emily Hi Bryan,

Thanks for leading off the guest blog entries!

Dark Reading also had a recent article about analyzing passwords used on phpbb.com which shown that passwords have not really improved all that much since 2006! See http://www.darkreading.com/blog/archives/2009/02/phpbb_password.html

Thanks for posting this useful info!

Emily

]]>