Re: Internet Worm

[cellwood () gauss ELEE CalPoly EDU (Chris Ellwood)]

Scott D. Yelich said...
> blah....
>
> in npassword try this password:
> blubird1.
>
> does it work for you?  i'm not sure if I have to configure my
> npassword... but it appears that the checks for numbers, case and
> punctuation.. was done before a truncation (even if there is a
> truncation) ... so it's still possible to pick piss-poor passwords.

That's more of a problem with the dictionary file you are using with npasswd
and not npasswd itself.  If 'blubird' was in the dictionary, 'blubird1'
wouldn't get by.  Also, the version of npasswd I have does the checks
both before and after truncation, so that shouldn't be a problem.

- Chris