I have never used this approach, but would be really hesitant to trust
the users to treat their password like a credit card. I mean we all
preach to keep the passwords confidential, but somehow they always end
up taped to the monitor or under the mouse pad. I think the better
solution would be to use easy to remember pass phrases. Just my .02
-----Original Message-----
From: listbounce_at_securityfocus.com [mailto:listbounce_at_securityfocus.com]
On Behalf Of Pranav Lal
Sent: Saturday, September 30, 2006 9:33 AM
To: security-basics_at_securityfocus.com
Subject: RE: Security procedure question
Hi all,
I remember reading somewhere that one practice for having strong
passwords
was to allow the users to write them down but treat the paper on which
they
were written like a credit card. If I remember correctly, the argument
went
that since people don't leave credit cards lying around, they would not
leave their passwords lying around either.
Has anyone tried this approach?
Pranav
------------------------------------------------------------------------
---
This list is sponsored by: Norwich University
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic
Excellence
in Information Security. Our program offers unparalleled Infosec
management
education and the case study affords you unmatched consulting
experience.
Using interactive e-Learning technology, you can earn this esteemed
degree,
without disrupting your career or home life.
http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---
---------------------------------------------------------------------------
This list is sponsored by: Norwich University
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.
http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------
Received on Oct 03 2006