/ Internet Info 1994 March / Internet Info CD-ROM (Walnut Creek) (March 1994).iso / security / doc / info / primer / primer.tar

< prev

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 61 63 6b 6e 6f 77 6c 64 | 65 67 65 6d 65 6e 74 73 |acknowld|egements|
|00000010| 2e 74 65 78 00 00 00 00 | 00 00 00 00 00 00 00 00 |.tex....|........|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000040| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000050| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000060| 00 00 00 00 20 20 20 36 | 34 30 20 00 20 20 36 31 |....   6|40 .  61|
|00000070| 31 30 20 00 20 20 20 31 | 31 36 20 00 20 20 20 20 |10 .   1|16 .    |
|00000080| 20 20 20 31 31 36 30 20 | 20 34 36 33 32 37 33 31 |   1160 | 4632731|
|00000090| 36 37 36 20 20 31 30 32 | 33 31 00 20 00 00 00 00 |676  102|31. ....|
|000000a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000100| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000200| 5c 73 65 63 74 69 6f 6e | 7b 41 63 6b 6e 6f 77 6c |\section|{Acknowl|
|00000210| 65 64 67 65 6d 65 6e 74 | 73 7d 0a 0a 0a 20 2d 2d |edgement|s}... --|
|00000220| 20 48 65 6c 70 20 6f 66 | 20 61 20 6c 6f 74 20 6f | Help of| a lot o|
|00000230| 66 20 70 65 6f 70 6c 65 | 2e 20 0a 20 2d 2d 20 63 |f people|. . -- c|
|00000240| 6f 70 69 65 73 20 77 65 | 72 65 20 73 65 6e 74 20 |opies we|re sent |
|00000250| 6f 75 74 20 74 6f 20 34 | 38 20 70 65 6f 70 6c 65 |out to 4|8 people|
|00000260| 20 66 6f 72 20 70 65 65 | 72 20 72 65 76 69 65 77 | for pee|r review|
|00000270| 0a 0a 5c 62 65 67 69 6e | 7b 64 65 73 63 72 69 70 |..\begin|{descrip|
|00000280| 74 69 6f 6e 7d 0a 0a 5c | 69 74 65 6d 5b 4a 65 72 |tion}..\|item[Jer|
|00000290| 72 79 20 43 61 72 6c 69 | 6e 2e 5d 20 46 6f 72 20 |ry Carli|n.] For |
|000002a0| 65 78 61 6d 70 6c 65 73 | 20 66 72 6f 6d 20 68 69 |examples| from hi|
|000002b0| 73 20 74 72 61 69 6e 69 | 6e 67 20 63 6f 75 72 73 |s traini|ng cours|
|000002c0| 65 2e 0a 5c 69 74 65 6d | 5b 4a 6f 65 20 43 61 72 |e..\item|[Joe Car|
|000002d0| 6c 73 6f 6e 2e 5d 20 46 | 6f 72 20 68 65 6c 70 20 |lson.] F|or help |
|000002e0| 77 69 74 68 20 73 70 65 | 6c 6c 69 6e 67 20 61 6e |with spe|lling an|
|000002f0| 64 20 67 72 61 6d 6d 61 | 72 2e 0a 5c 69 74 65 6d |d gramma|r..\item|
|00000300| 5b 4a 61 6d 65 73 20 45 | 6c 6c 69 73 2e 5d 20 46 |[James E|llis.] F|
|00000310| 6f 72 20 68 65 6c 70 20 | 77 69 74 68 20 6f 72 67 |or help |with org|
|00000320| 61 6e 69 7a 61 74 69 6f | 6e 2e 0a 5c 69 74 65 6d |anizatio|n..\item|
|00000330| 5b 41 6c 61 6e 20 46 65 | 64 65 6c 69 2e 5d 0a 5c |[Alan Fe|deli.].\|
|00000340| 69 74 65 6d 5b 50 61 75 | 6c 20 48 6f 6c 62 72 6f |item[Pau|l Holbro|
|00000350| 6f 6b 2e 5d 20 46 6f 72 | 20 68 65 6c 70 20 67 65 |ok.] For| help ge|
|00000360| 74 74 69 6e 67 20 74 68 | 69 73 20 64 6f 63 75 6d |tting th|is docum|
|00000370| 65 6e 74 20 64 69 73 74 | 72 69 62 75 74 65 64 2e |ent dist|ributed.|
|00000380| 0a 5c 69 74 65 6d 5b 44 | 61 76 69 64 20 4d 75 69 |.\item[D|avid Mui|
|00000390| 72 2e 5d 20 46 6f 72 20 | 68 65 6c 70 20 77 69 74 |r.] For |help wit|
|000003a0| 68 20 73 70 65 6c 6c 69 | 6e 67 2c 20 67 72 61 6d |h spelli|ng, gram|
|000003b0| 6d 61 72 20 61 6e 64 20 | 63 6f 6d 6d 65 6e 74 73 |mar and |comments|
|000003c0| 20 61 62 6f 75 74 0a 63 | 6f 6d 70 75 74 65 72 20 | about.c|omputer |
|000003d0| 67 61 6d 65 73 2e 0a 5c | 69 74 65 6d 5b 4b 65 76 |games..\|item[Kev|
|000003e0| 69 6e 20 4f 62 65 72 6d | 61 6e 2e 5d 20 46 6f 72 |in Oberm|an.] For|
|000003f0| 20 68 65 6c 70 20 77 69 | 74 68 20 56 4d 53 20 69 | help wi|th VMS i|
|00000400| 73 73 75 65 73 2c 20 73 | 70 65 6c 6c 69 6e 67 20 |ssues, s|pelling |
|00000410| 61 6e 64 20 67 72 61 6d | 6d 61 72 2e 0a 5c 69 74 |and gram|mar..\it|
|00000420| 65 6d 5b 4d 69 6b 65 20 | 4f 64 61 77 61 2e 5d 20 |em[Mike |Odawa.] |
|00000430| 46 6f 72 20 68 65 6c 70 | 20 77 69 74 68 20 74 68 |For help| with th|
|00000440| 65 20 20 6d 69 63 72 6f | 63 6f 6d 70 75 74 65 72 |e  micro|computer|
|00000450| 73 20 73 65 63 74 69 6f | 6e 2e 0a 0a 0a 0a 5c 65 |s sectio|n.....\e|
|00000460| 6e 64 7b 64 65 73 63 72 | 69 70 74 69 6f 6e 7d 0a |nd{descr|iption}.|
|00000470| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000480| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000490| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000500| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000510| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000520| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000530| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000540| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000550| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000560| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000570| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000580| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000590| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000600| 61 76 6f 69 64 61 6e 63 | 65 2e 74 65 78 00 00 00 |avoidanc|e.tex...|
|00000610| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000620| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000630| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000640| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000650| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000660| 00 00 00 00 20 20 20 36 | 34 30 20 00 20 20 36 31 |....   6|40 .  61|
|00000670| 31 30 20 00 20 20 20 31 | 31 36 20 00 20 20 20 20 |10 .   1|16 .    |
|00000680| 20 31 33 35 37 32 37 20 | 20 34 36 33 32 37 33 31 | 135727 | 4632731|
|00000690| 36 37 37 20 20 20 36 37 | 31 32 00 20 00 00 00 00 |677   67|12. ....|
|000006a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000700| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000710| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000720| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000730| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000740| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000760| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000800| 5c 73 65 63 74 69 6f 6e | 7b 49 6e 63 69 64 65 6e |\section|{Inciden|
|00000810| 74 20 41 76 6f 69 64 61 | 6e 63 65 7d 0a 25 5c 73 |t Avoida|nce}.%\s|
|00000820| 75 62 73 65 63 74 69 6f | 6e 7b 4f 76 65 72 76 69 |ubsectio|n{Overvi|
|00000830| 65 77 7d 0a 0a 60 60 41 | 6e 20 6f 75 6e 63 65 20 |ew}..``A|n ounce |
|00000840| 6f 66 20 70 72 65 76 65 | 6e 74 69 6f 6e 20 69 73 |of preve|ntion is|
|00000850| 20 77 6f 72 74 68 20 61 | 20 70 6f 75 6e 64 20 6f | worth a| pound o|
|00000860| 66 20 63 75 72 65 2e 27 | 27 20 20 49 6e 20 63 6f |f cure.'|'  In co|
|00000870| 6d 70 75 74 65 72 0a 73 | 65 63 75 72 69 74 79 20 |mputer.s|ecurity |
|00000880| 74 68 69 73 20 69 73 20 | 61 6e 20 75 6e 64 65 72 |this is |an under|
|00000890| 73 74 61 74 65 6d 65 6e | 74 20 62 79 20 61 20 67 |statemen|t by a g|
|000008a0| 72 65 61 74 65 72 20 66 | 61 63 74 6f 72 20 74 68 |reater f|actor th|
|000008b0| 61 6e 20 63 61 6e 20 62 | 65 0a 65 61 73 69 6c 79 |an can b|e.easily|
|000008c0| 20 62 65 20 62 65 6c 69 | 65 76 65 64 2e 20 20 56 | be beli|eved.  V|
|000008d0| 65 72 79 20 6c 69 74 74 | 6c 65 20 68 61 73 20 68 |ery litt|le has h|
|000008e0| 69 73 74 6f 72 69 63 61 | 6c 6c 79 20 62 65 65 6e |istorica|lly been|
|000008f0| 20 64 6f 6e 65 20 74 6f | 20 70 72 65 76 65 6e 74 | done to| prevent|
|00000900| 0a 63 6f 6d 70 75 74 65 | 72 20 62 72 65 61 6b 2d |.compute|r break-|
|00000910| 69 6e 73 20 61 6e 64 20 | 49 20 68 61 76 65 20 62 |ins and |I have b|
|00000920| 65 65 6e 20 74 6f 6c 64 | 20 62 79 20 61 20 6e 75 |een told| by a nu|
|00000930| 6d 62 65 72 20 6f 66 20 | 74 68 65 20 63 6f 75 6e |mber of |the coun|
|00000940| 74 72 79 27 73 20 74 6f | 70 0a 63 6f 6d 70 75 74 |try's to|p.comput|
|00000950| 65 72 20 73 63 69 65 6e | 74 69 73 74 73 20 74 68 |er scien|tists th|
|00000960| 61 74 20 60 60 43 6f 6d | 70 75 74 65 72 20 53 65 |at ``Com|puter Se|
|00000970| 63 75 72 69 74 79 20 69 | 73 20 61 20 77 61 73 74 |curity i|s a wast|
|00000980| 65 20 6f 66 20 20 74 69 | 6d 65 2e 27 27 0a 54 68 |e of  ti|me.''.Th|
|00000990| 65 20 62 65 6c 69 65 66 | 20 74 68 61 74 20 73 65 |e belief| that se|
|000009a0| 63 75 72 69 74 79 20 6d | 65 61 73 75 72 65 73 20 |curity m|easures |
|000009b0| 6f 72 20 70 72 65 76 65 | 6e 74 69 76 65 20 6d 65 |or preve|ntive me|
|000009c0| 64 69 63 69 6e 65 20 69 | 73 20 61 20 77 61 73 74 |dicine i|s a wast|
|000009d0| 65 0a 68 61 73 20 6c 65 | 64 20 74 6f 20 67 69 61 |e.has le|d to gia|
|000009e0| 6e 74 20 65 78 70 65 6e | 64 69 74 75 72 65 73 20 |nt expen|ditures |
|000009f0| 74 6f 20 72 65 70 61 69 | 72 20 64 61 6d 61 67 65 |to repai|r damage|
|00000a00| 20 74 6f 20 62 6f 74 68 | 20 63 6f 6d 70 75 74 65 | to both| compute|
|00000a10| 72 73 20 61 6e 64 20 70 | 65 6f 70 6c 65 0a 72 65 |rs and p|eople.re|
|00000a20| 73 70 65 63 74 69 76 65 | 6c 79 2e 20 20 4d 75 73 |spective|ly.  Mus|
|00000a30| 74 20 6f 66 20 6d 79 20 | 73 75 72 70 72 69 73 65 |t of my |surprise|
|00000a40| 2c 20 73 65 76 65 72 61 | 6c 20 73 79 73 74 65 6d |, severa|l system|
|00000a50| 20 6d 61 6e 61 67 65 72 | 73 20 72 65 76 69 65 77 | manager|s review|
|00000a60| 69 6e 67 0a 74 68 69 73 | 20 64 6f 63 75 6d 65 6e |ing.this| documen|
|00000a70| 74 20 77 65 72 65 20 73 | 75 72 65 20 74 68 61 74 |t were s|ure that|
|00000a80| 20 65 76 65 6e 20 62 61 | 73 69 63 20 70 72 65 76 | even ba|sic prev|
|00000a90| 65 6e 74 61 74 69 76 65 | 20 6d 65 61 73 75 72 65 |entative| measure|
|00000aa0| 73 20 77 6f 75 6c 64 0a | 6e 6f 74 20 62 65 20 63 |s would.|not be c|
|00000ab0| 6f 73 74 20 65 66 66 65 | 63 74 69 76 65 20 61 73 |ost effe|ctive as|
|00000ac0| 20 63 6f 6d 70 61 72 65 | 64 20 74 6f 20 72 65 70 | compare|d to rep|
|00000ad0| 61 69 72 69 6e 67 20 64 | 69 73 61 73 74 65 72 73 |airing d|isasters|
|00000ae0| 20 61 66 74 65 72 20 74 | 68 65 79 0a 6f 63 63 75 | after t|hey.occu|
|00000af0| 72 72 65 64 2e 20 0a 0a | 54 68 65 20 76 61 73 74 |rred. ..|The vast|
|00000b00| 20 6d 61 6a 6f 72 69 74 | 79 20 6f 66 20 74 68 65 | majorit|y of the|
|00000b10| 20 73 65 63 75 72 69 74 | 79 20 69 6e 63 69 64 65 | securit|y incide|
|00000b20| 6e 74 73 20 61 72 65 20 | 63 61 75 73 65 64 20 62 |nts are |caused b|
|00000b30| 79 20 6f 6e 65 20 6f 66 | 0a 5c 71 75 61 6e 74 5c |y one of|.\quant\|
|00000b40| 20 77 65 6c 6c 20 75 6e | 64 65 72 73 74 6f 6f 64 | well un|derstood|
|00000b50| 20 70 72 6f 62 6c 65 6d | 73 2e 20 20 42 79 20 6e | problem|s.  By n|
|00000b60| 6f 74 20 6d 61 6b 69 6e | 67 20 74 68 65 73 65 20 |ot makin|g these |
|00000b70| 6d 69 73 74 61 6b 65 73 | 2c 20 79 6f 75 20 63 61 |mistakes|, you ca|
|00000b80| 6e 0a 70 72 65 76 65 6e | 74 20 6d 6f 73 74 20 6f |n.preven|t most o|
|00000b90| 66 20 74 68 65 20 70 72 | 6f 62 6c 65 6d 73 20 66 |f the pr|oblems f|
|00000ba0| 72 6f 6d 20 68 61 70 70 | 65 6e 69 6e 67 20 74 6f |rom happ|ening to|
|00000bb0| 20 79 6f 75 72 20 73 79 | 73 74 65 6d 73 20 61 6e | your sy|stems an|
|00000bc0| 64 20 61 76 6f 69 64 0a | 75 6e 74 6f 6c 64 20 68 |d avoid.|untold h|
|00000bd0| 61 73 73 6c 65 73 20 61 | 6e 64 20 6c 6f 73 73 65 |assles a|nd losse|
|00000be0| 73 2e 20 20 41 6c 6d 6f | 73 74 20 65 76 65 72 79 |s.  Almo|st every|
|00000bf0| 20 73 69 74 65 20 74 68 | 61 74 20 49 20 73 75 72 | site th|at I sur|
|00000c00| 76 65 79 20 61 6e 64 20 | 61 6c 6d 6f 73 74 0a 65 |vey and |almost.e|
|00000c10| 76 65 72 79 20 69 6e 63 | 69 64 65 6e 74 20 74 68 |very inc|ident th|
|00000c20| 61 74 20 64 69 64 20 6e | 6f 74 20 69 6e 76 6f 6c |at did n|ot invol|
|00000c30| 76 65 20 69 6e 73 69 64 | 65 72 73 20 77 61 73 20 |ve insid|ers was |
|00000c40| 63 61 75 73 65 64 20 62 | 79 20 6f 6e 65 20 6f 66 |caused b|y one of|
|00000c50| 0a 74 68 65 73 65 20 20 | 70 72 6f 62 6c 65 6d 73 |.these  |problems|
|00000c60| 2e 20 20 49 6e 20 74 68 | 65 20 6d 6f 73 74 20 6f |.  In th|e most o|
|00000c70| 66 20 74 68 65 20 69 6e | 73 69 64 65 72 20 63 61 |f the in|sider ca|
|00000c80| 73 65 73 2c 20 6e 6f 20 | 61 6d 6f 75 6e 74 20 6f |ses, no |amount o|
|00000c90| 66 0a 63 6f 6d 70 75 74 | 65 72 20 73 65 63 75 72 |f.comput|er secur|
|00000ca0| 69 74 79 20 77 6f 75 6c | 64 20 68 61 76 65 20 68 |ity woul|d have h|
|00000cb0| 65 6c 70 65 64 20 61 6e | 64 20 74 68 65 73 65 20 |elped an|d these |
|00000cc0| 61 72 65 20 69 6e 20 6d | 61 6e 79 20 77 61 79 73 |are in m|any ways|
|00000cd0| 20 64 65 6d 6f 6e 73 74 | 72 61 74 65 64 0a 70 72 | demonst|rated.pr|
|00000ce0| 6f 62 6c 65 6d 73 20 77 | 69 74 68 20 70 68 79 73 |oblems w|ith phys|
|00000cf0| 69 63 61 6c 20 73 65 63 | 75 72 69 74 79 20 6f 72 |ical sec|urity or|
|00000d00| 20 70 65 72 73 6f 6e 6e | 65 6c 20 70 6f 6c 69 63 | personn|el polic|
|00000d10| 79 20 72 61 74 68 65 72 | 20 74 68 61 6e 20 77 69 |y rather| than wi|
|00000d20| 74 68 0a 63 6f 6d 70 75 | 74 65 72 20 73 65 63 75 |th.compu|ter secu|
|00000d30| 72 69 74 79 20 70 65 72 | 20 73 65 2e 0a 0a 4d 6f |rity per| se...Mo|
|00000d40| 73 74 20 6f 66 20 74 68 | 65 20 73 65 63 75 72 69 |st of th|e securi|
|00000d50| 74 79 20 69 6e 63 69 64 | 65 6e 74 73 20 61 72 65 |ty incid|ents are|
|00000d60| 20 63 61 75 73 65 64 20 | 62 79 20 60 60 61 74 74 | caused |by ``att|
|00000d70| 61 63 6b 65 72 73 27 27 | 20 6f 66 20 6c 69 6d 69 |ackers''| of limi|
|00000d80| 74 65 64 0a 61 62 69 6c | 69 74 79 20 61 6e 64 20 |ted.abil|ity and |
|00000d90| 72 65 73 6f 75 72 63 65 | 73 2e 20 20 42 65 63 61 |resource|s.  Beca|
|00000da0| 75 73 65 20 6f 66 20 74 | 68 69 73 20 61 6e 64 20 |use of t|his and |
|00000db0| 62 65 63 61 75 73 65 20 | 74 68 65 72 65 20 61 72 |because |there ar|
|00000dc0| 65 20 73 6f 20 6d 61 6e | 79 0a 65 61 73 79 20 74 |e so man|y.easy t|
|00000dd0| 61 72 67 65 74 73 2c 20 | 69 66 20 79 6f 75 20 70 |argets, |if you p|
|00000de0| 72 6f 76 69 64 65 20 74 | 68 65 20 6d 6f 73 74 20 |rovide t|he most |
|00000df0| 62 61 73 69 63 20 6c 65 | 76 65 6c 20 6f 66 20 70 |basic le|vel of p|
|00000e00| 72 6f 74 65 63 74 69 6f | 6e 2c 20 6d 6f 73 74 0a |rotectio|n, most.|
|00000e10| 6f 66 20 74 68 65 20 61 | 74 74 61 63 6b 65 72 73 |of the a|ttackers|
|00000e20| 20 77 69 6c 6c 20 62 72 | 65 61 6b 20 69 6e 74 6f | will br|eak into|
|00000e30| 20 73 6f 6d 65 20 6f 74 | 68 65 72 20 73 69 74 65 | some ot|her site|
|00000e40| 20 69 6e 73 74 65 61 64 | 20 6f 66 20 62 6f 74 68 | instead| of both|
|00000e50| 65 72 69 6e 67 0a 79 6f | 75 72 73 2e 20 20 54 68 |ering.yo|urs.  Th|
|00000e60| 65 72 65 20 61 72 65 20 | 6f 66 0a 63 6f 75 72 73 |ere are |of.cours|
|00000e70| 65 20 65 78 63 65 70 74 | 69 6f 6e 61 6c 20 63 61 |e except|ional ca|
|00000e80| 73 65 73 2e 20 20 49 66 | 20 79 6f 75 20 61 72 65 |ses.  If| you are|
|00000e90| 20 62 65 6c 69 65 76 65 | 64 20 74 6f 20 68 61 76 | believe|d to hav|
|00000ea0| 65 20 68 69 67 68 6c 79 | 0a 73 65 6e 73 69 74 69 |e highly|.sensiti|
|00000eb0| 76 65 20 69 6e 66 6f 72 | 6d 61 74 69 6f 6e 20 6f |ve infor|mation o|
|00000ec0| 72 20 61 72 65 20 6f 6e | 20 61 20 60 60 68 69 74 |r are on| a ``hit|
|00000ed0| 20 6c 69 73 74 27 27 20 | 6f 66 20 6f 6e 65 20 74 | list'' |of one t|
|00000ee0| 79 70 65 20 6f 72 20 61 | 6e 6f 74 68 65 72 2c 0a |ype or a|nother,.|
|00000ef0| 79 6f 75 20 6d 61 79 20 | 65 6e 63 6f 75 6e 74 65 |you may |encounte|
|00000f00| 72 20 6d 6f 72 65 20 64 | 65 64 69 63 61 74 65 64 |r more d|edicated|
|00000f10| 20 61 74 74 61 63 6b 65 | 72 73 2e 20 20 52 65 61 | attacke|rs.  Rea|
|00000f20| 64 65 72 73 20 69 6e 74 | 65 72 65 73 74 65 64 20 |ders int|erested |
|00000f30| 69 6e 20 6d 6f 72 65 0a | 63 6f 6d 70 72 65 68 65 |in more.|comprehe|
|00000f40| 6e 73 69 76 65 20 64 65 | 66 65 6e 73 69 76 65 20 |nsive de|fensive |
|00000f50| 73 74 72 61 74 65 67 69 | 65 73 20 73 68 6f 75 6c |strategi|es shoul|
|00000f60| 64 20 63 6f 6e 73 75 6c | 74 20 5c 63 6c 61 73 73 |d consul|t \class|
|00000f70| 69 66 69 65 64 2e 0a 0a | 4f 76 65 72 20 61 6c 6c |ified...|Over all|
|00000f80| 2c 20 70 72 65 76 65 6e | 74 69 6f 6e 20 6f 66 20 |, preven|tion of |
|00000f90| 61 20 70 72 6f 62 6c 65 | 6d 20 69 73 20 61 62 6f |a proble|m is abo|
|00000fa0| 75 74 20 66 6f 75 72 20 | 6f 72 64 65 72 73 20 6f |ut four |orders o|
|00000fb0| 66 20 6d 61 67 6e 69 74 | 75 64 65 0a 63 68 65 61 |f magnit|ude.chea|
|00000fc0| 70 65 72 20 74 68 61 6e | 20 68 61 76 69 6e 67 20 |per than| having |
|00000fd0| 74 6f 20 68 61 6e 64 6c | 69 6e 67 20 69 74 20 69 |to handl|ing it i|
|00000fe0| 6e 20 74 68 65 20 61 76 | 65 72 61 67 65 20 63 61 |n the av|erage ca|
|00000ff0| 73 65 2e 20 20 50 72 6f | 70 65 72 20 70 6c 61 6e |se.  Pro|per plan|
|00001000| 6e 69 6e 67 20 63 61 6e | 0a 72 65 64 75 63 65 20 |ning can|.reduce |
|00001010| 74 68 65 20 63 6f 73 74 | 20 6f 66 20 69 6e 63 69 |the cost| of inci|
|00001020| 64 65 6e 74 20 68 61 6e | 64 6c 69 6e 67 20 61 6e |dent han|dling an|
|00001030| 64 20 72 65 63 6f 76 65 | 72 79 20 61 6e 64 20 69 |d recove|ry and i|
|00001040| 73 20 64 69 73 63 75 73 | 73 65 64 20 69 6e 0a 5c |s discus|sed in.\|
|00001050| 70 6c 61 6e 6e 69 6e 67 | 2e 20 20 49 6e 20 61 64 |planning|.  In ad|
|00001060| 64 69 74 69 6f 6e 20 74 | 6f 20 77 68 61 74 65 76 |dition t|o whatev|
|00001070| 65 72 20 6f 74 68 65 72 | 20 6d 65 61 73 75 72 65 |er other| measure|
|00001080| 73 20 61 72 65 20 74 61 | 6b 65 6e 2c 20 74 68 65 |s are ta|ken, the|
|00001090| 0a 67 72 65 61 74 65 73 | 74 20 69 6e 63 72 65 6d |.greates|t increm|
|000010a0| 65 6e 74 61 6c 20 73 65 | 63 75 72 69 74 79 20 69 |ental se|curity i|
|000010b0| 6d 70 72 6f 76 65 6d 65 | 6e 74 20 77 69 6c 6c 20 |mproveme|nt will |
|000010c0| 62 65 20 6f 62 74 61 69 | 6e 65 64 20 62 65 20 69 |be obtai|ned be i|
|000010d0| 6d 70 6c 65 6d 65 6e 74 | 69 6e 67 20 74 68 65 0a |mplement|ing the.|
|000010e0| 73 69 6d 70 6c 65 20 6d | 65 61 73 75 72 65 73 20 |simple m|easures |
|000010f0| 64 65 73 63 72 69 62 65 | 64 20 62 65 6c 6f 77 2e |describe|d below.|
|00001100| 0a 0a 0a 0a 5c 73 75 62 | 73 65 63 74 69 6f 6e 7b |....\sub|section{|
|00001110| 50 61 73 73 77 6f 72 64 | 73 7d 0a 0a 57 68 69 6c |Password|s}..Whil|
|00001120| 65 20 60 60 67 6f 6f 64 | 20 70 61 73 73 77 6f 72 |e ``good| passwor|
|00001130| 64 73 27 27 20 69 73 20 | 6e 6f 74 20 61 20 68 6f |ds'' is |not a ho|
|00001140| 74 20 61 6e 64 20 73 65 | 78 79 20 74 6f 70 69 63 |t and se|xy topic|
|00001150| 20 61 6e 64 20 77 69 6c | 6c 20 6e 65 76 65 72 0a | and wil|l never.|
|00001160| 63 6f 6d 6d 61 6e 64 20 | 74 68 65 20 70 72 65 73 |command |the pres|
|00001170| 74 69 67 65 20 6f 66 20 | 65 78 70 6c 6f 69 74 61 |tige of |exploita|
|00001180| 62 6c 65 20 62 75 67 73 | 20 69 6e 20 74 68 65 20 |ble bugs| in the |
|00001190| 6f 70 65 72 61 74 69 6e | 67 20 73 79 73 74 65 6d |operatin|g system|
|000011a0| 0a 69 74 73 65 6c 66 2c | 20 69 74 20 69 73 20 74 |.itself,| it is t|
|000011b0| 68 65 20 73 69 6e 67 6c | 65 20 7b 5c 65 6d 20 6d |he singl|e {\em m|
|000011c0| 6f 73 74 20 69 6d 70 6f | 72 74 61 6e 74 5c 2f 7d |ost impo|rtant\/}|
|000011d0| 20 74 6f 70 69 63 20 69 | 6e 20 69 6e 63 69 64 65 | topic i|n incide|
|000011e0| 6e 74 0a 70 72 65 76 65 | 6e 74 69 6f 6e 2e 20 20 |nt.preve|ntion.  |
|000011f0| 44 6f 69 6e 67 20 65 76 | 65 72 79 74 68 69 6e 67 |Doing ev|erything|
|00001200| 20 65 6c 73 65 20 65 6e | 74 69 72 65 6c 79 20 63 | else en|tirely c|
|00001210| 6f 72 72 65 63 74 6c 79 | 20 69 73 20 61 6c 6d 6f |orrectly| is almo|
|00001220| 73 74 20 6f 66 0a 7b 5c | 65 6d 20 6e 6f 20 76 61 |st of.{\|em no va|
|00001230| 6c 75 65 5c 2f 7d 20 75 | 6e 6c 65 73 73 20 79 6f |lue\/} u|nless yo|
|00001240| 75 20 67 65 74 20 74 68 | 69 73 20 72 69 67 68 74 |u get th|is right|
|00001250| 21 0a 0a 5c 73 75 62 73 | 75 62 73 65 63 74 69 6f |!..\subs|ubsectio|
|00001260| 6e 7b 4a 6f 65 27 73 7d | 0a 0a 41 20 60 60 4a 6f |n{Joe's}|..A ``Jo|
|00001270| 65 27 27 20 69 73 20 61 | 6e 20 61 63 63 6f 75 6e |e'' is a|n accoun|
|00001280| 74 20 77 68 65 72 65 20 | 74 68 65 20 75 73 65 72 |t where |the user|
|00001290| 6e 61 6d 65 20 69 73 20 | 74 68 65 20 73 61 6d 65 |name is |the same|
|000012a0| 20 61 73 20 74 68 65 0a | 70 61 73 73 77 6f 72 64 | as the.|password|
|000012b0| 2e 20 20 54 68 69 73 20 | 6d 61 6b 65 73 20 74 68 |.  This |makes th|
|000012c0| 65 20 70 61 73 73 77 6f | 72 64 20 62 6f 74 68 20 |e passwo|rd both |
|000012d0| 65 61 73 79 20 74 6f 20 | 72 65 6d 65 6d 62 65 72 |easy to |remember|
|000012e0| 20 61 6e 64 20 65 61 73 | 79 20 74 6f 0a 67 75 65 | and eas|y to.gue|
|000012f0| 73 73 2e 20 20 49 74 20 | 69 73 20 74 68 65 20 73 |ss.  It |is the s|
|00001300| 69 6e 67 6c 65 20 6d 6f | 73 74 20 63 6f 6d 6d 6f |ingle mo|st commo|
|00001310| 6e 20 63 61 75 73 65 20 | 6f 66 20 70 61 73 73 77 |n cause |of passw|
|00001320| 6f 72 64 20 70 72 6f 62 | 6c 65 6d 73 20 69 6e 20 |ord prob|lems in |
|00001330| 74 68 65 0a 6d 6f 64 65 | 72 6e 20 77 6f 72 6c 64 |the.mode|rn world|
|00001340| 2e 0a 0a 49 6e 20 31 39 | 38 36 2c 20 74 68 65 72 |...In 19|86, ther|
|00001350| 65 20 77 61 73 20 70 6f | 70 75 6c 61 72 20 63 6f |e was po|pular co|
|00001360| 6e 6a 65 63 74 75 72 65 | 20 74 68 61 74 20 65 76 |njecture| that ev|
|00001370| 65 72 79 20 6d 61 63 68 | 69 6e 65 20 68 61 64 20 |ery mach|ine had |
|00001380| 61 0a 4a 6f 65 2e 20 20 | 54 68 65 72 65 20 77 61 |a.Joe.  |There wa|
|00001390| 73 20 66 61 69 72 20 61 | 6d 6f 75 6e 74 20 6f 66 |s fair a|mount of|
|000013a0| 20 72 61 6e 64 6f 6d 20 | 74 65 73 74 69 6e 67 20 | random |testing |
|000013b0| 64 6f 6e 65 20 61 6e 64 | 20 69 6e 20 66 61 63 74 |done and| in fact|
|000013c0| 20 61 0a 4a 6f 65 20 77 | 61 73 20 66 6f 75 6e 64 | a.Joe w|as found|
|000013d0| 20 6f 6e 20 65 61 63 68 | 20 61 6e 64 20 65 76 65 | on each| and eve|
|000013e0| 72 79 20 6d 61 63 68 69 | 6e 65 20 74 65 73 74 65 |ry machi|ne teste|
|000013f0| 64 2e 20 20 54 68 65 73 | 65 20 69 6e 63 6c 75 64 |d.  Thes|e includ|
|00001400| 65 64 0a 6d 61 63 68 69 | 6e 65 73 20 74 68 61 74 |ed.machi|nes that|
|00001410| 20 68 61 64 20 70 61 73 | 73 77 6f 72 64 20 73 79 | had pas|sword sy|
|00001420| 73 74 65 6d 73 20 64 65 | 73 69 67 6e 65 64 20 74 |stems de|signed t|
|00001430| 6f 20 70 72 65 76 65 6e | 74 20 75 73 65 72 6e 61 |o preven|t userna|
|00001440| 6d 65 73 20 66 72 6f 6d | 0a 62 65 69 6e 67 20 75 |mes from|.being u|
|00001450| 73 65 64 20 61 73 20 70 | 61 73 73 77 6f 72 64 73 |sed as p|asswords|
|00001460| 2e 0a 0a 54 68 69 73 20 | 73 75 6d 6d 65 72 2c 20 |...This |summer, |
|00001470| 77 68 69 6c 65 20 49 20 | 77 61 73 20 74 65 73 74 |while I |was test|
|00001480| 69 6e 67 20 61 20 73 65 | 72 69 65 73 20 6f 66 20 |ing a se|ries of |
|00001490| 73 65 6e 73 69 74 69 76 | 65 20 73 79 73 74 65 6d |sensitiv|e system|
|000014a0| 73 2c 20 77 68 65 72 65 | 0a 68 75 6e 64 72 65 64 |s, where|.hundred|
|000014b0| 20 6f 66 20 74 68 6f 75 | 73 61 6e 64 73 20 6f 66 | of thou|sands of|
|000014c0| 20 64 6f 6c 6c 61 72 73 | 20 77 65 72 65 20 73 70 | dollars| were sp|
|000014d0| 65 6e 74 20 74 6f 20 72 | 65 6d 6f 76 65 20 73 65 |ent to r|emove se|
|000014e0| 63 75 72 69 74 79 20 68 | 6f 6c 65 73 0a 69 6e 63 |curity h|oles.inc|
|000014f0| 6c 75 64 69 6e 67 20 72 | 65 2d 77 72 69 74 69 6e |luding r|e-writin|
|00001500| 67 20 61 20 66 61 69 72 | 20 66 72 61 63 74 69 6f |g a fair| fractio|
|00001510| 6e 20 6f 66 20 74 68 65 | 20 6f 70 65 72 61 74 69 |n of the| operati|
|00001520| 6e 67 20 73 79 73 74 65 | 6d 2c 20 74 68 65 72 65 |ng syste|m, there|
|00001530| 0a 77 65 72 65 20 4a 6f | 65 73 2e 0a 0a 49 74 20 |.were Jo|es...It |
|00001540| 69 73 20 77 6f 72 74 68 | 77 68 69 6c 65 20 74 6f |is worth|while to|
|00001550| 20 69 6e 63 6c 75 64 65 | 20 61 20 70 72 6f 63 65 | include| a proce|
|00001560| 73 73 20 69 6e 20 79 6f | 75 72 20 73 79 73 74 65 |ss in yo|ur syste|
|00001570| 6d 20 62 61 74 63 68 69 | 6e 67 20 66 69 6c 65 0a |m batchi|ng file.|
|00001580| 28 7b 5c 74 74 20 63 72 | 6f 6e 7d 20 6f 6e 20 75 |({\tt cr|on} on u|
|00001590| 6e 69 78 29 20 74 6f 20 | 63 68 65 63 6b 20 66 6f |nix) to |check fo|
|000015a0| 72 20 4a 6f 65 73 20 65 | 78 70 6c 69 63 69 74 6c |r Joes e|xplicitl|
|000015b0| 79 2e 20 20 54 68 65 20 | 6d 6f 73 74 20 63 6f 6d |y.  The |most com|
|000015c0| 6d 6f 6e 0a 6f 63 63 75 | 72 72 65 6e 63 65 73 20 |mon.occu|rrences |
|000015d0| 6f 66 20 4a 6f 65 73 20 | 69 73 20 74 68 65 20 69 |of Joes |is the i|
|000015e0| 6e 69 74 69 61 6c 20 70 | 61 73 73 77 6f 72 64 20 |nitial p|assword |
|000015f0| 74 68 61 74 20 74 68 65 | 20 73 79 73 74 65 6d 0a |that the| system.|
|00001600| 61 64 6d 69 6e 69 73 74 | 72 61 74 6f 72 73 20 73 |administ|rators s|
|00001610| 65 74 20 66 6f 72 20 61 | 6e 20 61 63 63 6f 75 6e |et for a|n accoun|
|00001620| 74 20 77 68 69 63 68 20 | 68 61 73 20 6e 65 76 65 |t which |has neve|
|00001630| 72 20 62 65 65 6e 20 63 | 68 61 6e 67 65 64 2e 20 |r been c|hanged. |
|00001640| 20 4f 66 74 65 6e 0a 74 | 68 69 73 20 69 6e 69 74 | Often.t|his init|
|00001650| 69 61 6c 20 70 61 73 73 | 77 6f 72 64 20 69 73 20 |ial pass|word is |
|00001660| 73 65 74 20 62 79 20 74 | 68 65 20 61 64 6d 69 6e |set by t|he admin|
|00001670| 69 73 74 72 61 74 6f 72 | 20 77 69 74 68 20 74 68 |istrator| with th|
|00001680| 65 20 65 78 70 65 63 74 | 61 74 69 6f 6e 0a 74 68 |e expect|ation.th|
|00001690| 65 20 75 73 65 72 20 77 | 69 6c 6c 20 63 68 61 6e |e user w|ill chan|
|000016a0| 67 65 20 69 74 20 70 72 | 6f 6d 70 74 6c 79 2e 20 |ge it pr|omptly. |
|000016b0| 20 4f 66 74 65 6e 20 74 | 68 65 20 75 73 65 72 20 | Often t|he user |
|000016c0| 64 6f 65 73 6e 27 74 20 | 6b 6e 6f 77 20 68 6f 77 |doesn't |know how|
|000016d0| 20 74 6f 0a 63 68 61 6e | 67 65 20 69 74 20 6f 72 | to.chan|ge it or|
|000016e0| 20 69 6e 20 66 61 63 74 | 20 6e 65 76 65 72 20 6c | in fact| never l|
|000016f0| 6f 67 73 20 69 6e 20 61 | 74 20 61 6c 6c 2e 20 20 |ogs in a|t all.  |
|00001700| 49 6e 20 74 68 65 20 6c | 61 74 74 65 72 20 63 61 |In the l|atter ca|
|00001710| 73 65 20 61 0a 64 6f 72 | 6d 61 6e 74 20 61 63 63 |se a.dor|mant acc|
|00001720| 6f 75 6e 74 20 0a 6c 69 | 65 73 20 6f 6e 20 74 68 |ount .li|es on th|
|00001730| 65 20 73 79 73 74 65 6d | 20 61 63 63 6f 6d 70 6c |e system| accompl|
|00001740| 69 73 68 69 6e 67 20 6e | 6f 74 68 69 6e 67 20 65 |ishing n|othing e|
|00001750| 78 63 65 70 74 20 77 61 | 73 74 69 6e 67 20 73 79 |xcept wa|sting sy|
|00001760| 73 74 65 6d 0a 72 65 73 | 6f 75 72 63 65 73 20 61 |stem.res|ources a|
|00001770| 6e 64 20 69 6e 63 72 65 | 61 73 69 6e 67 20 76 75 |nd incre|asing vu|
|00001780| 6c 6e 65 72 61 62 69 6c | 69 74 69 65 73 2e 0a 0a |lnerabil|ities...|
|00001790| 5c 73 75 62 73 75 62 73 | 65 63 74 69 6f 6e 7b 53 |\subsubs|ection{S|
|000017a0| 61 6d 65 20 50 61 73 73 | 77 6f 72 64 73 20 6f 6e |ame Pass|words on|
|000017b0| 20 44 69 66 66 65 72 65 | 6e 74 20 4d 61 63 68 69 | Differe|nt Machi|
|000017c0| 6e 65 73 7d 0a 0a 4d 61 | 6e 79 20 79 65 61 72 73 |nes}..Ma|ny years|
|000017d0| 20 61 67 6f 20 77 68 65 | 6e 20 61 20 63 6f 6d 70 | ago whe|n a comp|
|000017e0| 75 74 69 6e 67 20 63 65 | 6e 74 65 72 20 68 61 64 |uting ce|nter had|
|000017f0| 20 61 20 73 69 6e 67 6c | 65 20 6d 61 69 6e 66 72 | a singl|e mainfr|
|00001800| 61 6d 65 20 74 68 65 0a | 69 73 73 75 65 20 6f 66 |ame the.|issue of|
|00001810| 20 61 20 75 73 65 72 20 | 68 61 76 69 6e 67 20 74 | a user |having t|
|00001820| 68 65 20 73 61 6d 65 20 | 70 61 73 73 77 6f 72 64 |he same |password|
|00001830| 20 6f 6e 20 6d 75 6c 74 | 69 70 6c 65 20 6d 61 63 | on mult|iple mac|
|00001840| 68 69 6e 65 73 20 77 61 | 73 0a 6d 6f 6f 74 2e 20 |hines wa|s.moot. |
|00001850| 20 41 73 20 6c 6f 6e 67 | 20 74 68 65 20 6e 75 6d | As long| the num|
|00001860| 62 65 72 20 6f 66 20 6d | 61 63 68 69 6e 65 73 20 |ber of m|achines |
|00001870| 74 68 61 74 20 61 20 75 | 73 65 72 20 61 63 63 65 |that a u|ser acce|
|00001880| 73 73 65 64 20 77 61 73 | 20 76 65 72 79 20 73 6d |ssed was| very sm|
|00001890| 61 6c 6c 2c 20 69 74 0a | 77 61 73 20 72 65 61 73 |all, it.|was reas|
|000018a0| 6f 6e 61 62 6c 65 20 74 | 6f 20 72 65 71 75 65 73 |onable t|o reques|
|000018b0| 74 20 74 68 61 74 20 61 | 20 70 65 72 73 6f 6e 20 |t that a| person |
|000018c0| 74 6f 20 75 73 65 20 61 | 20 64 69 66 66 65 72 65 |to use a| differe|
|000018d0| 6e 74 20 70 61 73 73 77 | 6f 72 64 20 6f 6e 0a 65 |nt passw|ord on.e|
|000018e0| 61 63 68 20 6d 61 63 68 | 69 6e 65 20 6f 72 20 73 |ach mach|ine or s|
|000018f0| 65 74 20 6f 66 20 6d 61 | 63 68 69 6e 65 73 2e 20 |et of ma|chines. |
|00001900| 20 57 69 74 68 20 61 20 | 6d 6f 64 65 72 6e 20 77 | With a |modern w|
|00001910| 6f 72 6b 73 74 61 74 69 | 6f 6e 0a 65 6e 76 69 72 |orkstati|on.envir|
|00001920| 6f 6e 6d 65 6e 74 2c 20 | 69 74 20 69 73 20 6e 6f |onment, |it is no|
|00001930| 20 6c 6f 6e 67 65 72 20 | 70 72 61 63 74 69 63 61 | longer |practica|
|00001940| 6c 20 74 6f 20 65 78 70 | 65 63 74 20 74 68 69 73 |l to exp|ect this|
|00001950| 20 66 72 6f 6d 20 61 20 | 75 73 65 72 20 61 6e 64 | from a |user and|
|00001960| 0a 61 20 75 73 65 72 20 | 69 73 20 75 6e 6c 69 6b |.a user |is unlik|
|00001970| 65 6c 79 20 74 6f 20 63 | 6f 6d 70 6c 79 20 69 66 |ely to c|omply if|
|00001980| 20 61 73 6b 65 64 2e 20 | 20 54 68 65 72 65 20 61 | asked. | There a|
|00001990| 72 65 20 61 20 6e 75 6d | 62 65 72 20 6f 66 20 73 |re a num|ber of s|
|000019a0| 69 6d 70 6c 65 0a 63 6f | 6d 70 72 6f 6d 69 73 65 |imple.co|mpromise|
|000019b0| 20 6d 65 61 73 75 72 65 | 73 20 74 68 61 74 20 63 | measure|s that c|
|000019c0| 61 6e 20 61 6e 64 20 73 | 68 6f 75 6c 64 20 62 65 |an and s|hould be|
|000019d0| 20 74 61 6b 65 6e 2e 0a | 0a 41 6d 6f 6e 67 20 74 | taken..|.Among t|
|000019e0| 68 65 73 65 20 6d 65 61 | 73 75 72 65 73 20 69 73 |hese mea|sures is|
|000019f0| 20 72 65 71 75 65 73 74 | 69 6e 67 20 74 68 61 74 | request|ing that|
|00001a00| 20 70 72 69 76 69 6c 65 | 67 65 64 20 75 73 65 72 | privile|ged user|
|00001a10| 73 20 68 61 76 65 0a 64 | 69 66 66 65 72 65 6e 74 |s have.d|ifferent|
|00001a20| 20 70 61 73 73 77 6f 72 | 64 73 20 66 6f 72 20 74 | passwor|ds for t|
|00001a30| 68 65 69 72 20 70 72 69 | 76 69 6c 65 67 65 64 20 |heir pri|vileged |
|00001a40| 61 63 63 6f 75 6e 74 73 | 20 74 68 61 6e 20 66 6f |accounts| than fo|
|00001a50| 72 20 74 68 65 69 72 0a | 6e 6f 72 6d 61 6c 20 75 |r their.|normal u|
|00001a60| 73 65 20 61 63 63 6f 75 | 6e 74 20 61 6e 64 20 66 |se accou|nt and f|
|00001a70| 6f 72 20 74 68 65 69 72 | 20 61 63 63 6f 75 6e 74 |or their| account|
|00001a80| 73 20 6f 6e 20 6d 61 63 | 68 69 6e 65 73 20 61 74 |s on mac|hines at|
|00001a90| 20 6f 74 68 65 72 20 63 | 65 6e 74 65 72 73 2e 0a | other c|enters..|
|00001aa0| 49 66 20 74 68 65 20 6c | 61 74 74 65 72 20 69 73 |If the l|atter is|
|00001ab0| 20 6e 6f 74 20 74 68 65 | 20 63 61 73 65 2c 20 74 | not the| case, t|
|00001ac0| 68 65 6e 20 61 6e 79 6f | 6e 65 20 77 68 6f 20 67 |hen anyo|ne who g|
|00001ad0| 61 69 6e 73 20 63 6f 6e | 74 72 6f 6c 20 6f 66 20 |ains con|trol of |
|00001ae0| 6f 6e 65 20 6f 66 0a 74 | 68 65 73 65 20 60 60 6f |one of.t|hese ``o|
|00001af0| 74 68 65 72 27 27 20 6d | 61 63 68 69 6e 65 73 20 |ther'' m|achines |
|00001b00| 77 68 69 63 68 20 79 6f | 75 20 68 61 76 65 20 6e |which yo|u have n|
|00001b10| 6f 20 63 6f 6e 74 72 6f | 6c 20 6f 76 65 72 2c 20 |o contro|l over, |
|00001b20| 68 61 73 20 67 61 69 6e | 65 64 0a 70 72 69 76 69 |has gain|ed.privi|
|00001b30| 6c 65 67 65 64 20 61 63 | 63 65 73 73 20 74 6f 20 |leged ac|cess to |
|00001b40| 79 6f 75 72 73 20 61 73 | 20 77 65 6c 6c 2e 0a 0a |yours as| well...|
|00001b50| 54 68 65 20 62 61 73 69 | 63 20 71 75 65 73 74 69 |The basi|c questi|
|00001b60| 6f 6e 20 6f 66 20 77 68 | 65 6e 20 70 61 73 73 77 |on of wh|en passw|
|00001b70| 6f 72 64 73 20 73 68 6f | 75 6c 64 20 62 65 20 74 |ords sho|uld be t|
|00001b80| 68 65 20 73 61 6d 65 20 | 69 73 20 61 63 74 75 61 |he same |is actua|
|00001b90| 6c 6c 79 20 61 0a 73 69 | 6d 70 6c 65 20 6f 6e 65 |lly a.si|mple one|
|00001ba0| 2e 20 20 50 61 73 73 77 | 6f 72 64 73 20 73 68 6f |.  Passw|ords sho|
|00001bb0| 75 6c 64 20 62 65 20 74 | 68 65 20 73 61 6d 65 20 |uld be t|he same |
|00001bc0| 77 68 65 6e 20 74 68 65 | 20 74 77 6f 20 6d 61 63 |when the| two mac|
|00001bd0| 68 69 6e 65 73 20 61 72 | 65 0a 28 31 29 20 6c 6f |hines ar|e.(1) lo|
|00001be0| 67 69 63 61 6c 6c 79 20 | 65 71 75 69 76 61 6c 65 |gically |equivale|
|00001bf0| 6e 74 20 28 61 73 20 69 | 6e 20 61 20 70 6f 6f 6c |nt (as i|n a pool|
|00001c00| 20 6f 66 20 77 6f 72 6b | 73 74 61 74 69 6f 6e 73 | of work|stations|
|00001c10| 29 2c 20 28 32 29 20 60 | 60 74 72 75 73 74 0a 65 |), (2) `|`trust.e|
|00001c20| 61 63 68 20 6f 74 68 65 | 72 27 27 20 74 6f 20 74 |ach othe|r'' to t|
|00001c30| 68 65 20 65 78 74 65 6e | 74 20 74 68 61 74 20 63 |he exten|t that c|
|00001c40| 6f 6d 70 72 6f 6d 69 73 | 69 6e 67 20 6f 6e 65 20 |ompromis|ing one |
|00001c50| 77 6f 75 6c 64 20 63 6f | 6d 70 72 6f 6d 69 73 65 |would co|mpromise|
|00001c60| 20 74 68 65 20 6f 74 68 | 65 72 73 0a 69 6e 20 6f | the oth|ers.in o|
|00001c70| 74 68 65 72 20 77 61 79 | 73 2c 20 6f 72 20 28 33 |ther way|s, or (3|
|00001c80| 29 20 61 72 65 20 72 75 | 6e 20 62 79 20 74 68 65 |) are ru|n by the|
|00001c90| 20 73 61 6d 65 20 63 65 | 6e 74 65 72 20 77 69 74 | same ce|nter wit|
|00001ca0| 68 20 74 68 65 20 73 61 | 6d 65 0a 73 65 63 75 72 |h the sa|me.secur|
|00001cb0| 69 74 79 20 6d 65 61 73 | 75 72 65 73 2e 20 20 50 |ity meas|ures.  P|
|00001cc0| 61 73 73 77 6f 72 64 73 | 20 73 68 6f 75 6c 64 20 |asswords| should |
|00001cd0| 62 65 20 64 69 66 66 65 | 72 65 6e 74 20 77 68 65 |be diffe|rent whe|
|00001ce0| 6e 20 74 68 65 20 63 6f | 6d 70 75 74 65 72 73 0a |n the co|mputers.|
|00001cf0| 61 72 65 20 28 31 29 20 | 72 75 6e 20 62 79 20 64 |are (1) |run by d|
|00001d00| 69 66 66 65 72 65 6e 74 | 20 6f 72 67 61 6e 69 7a |ifferent| organiz|
|00001d10| 61 74 69 6f 6e 73 2c 20 | 28 32 29 20 68 61 76 65 |ations, |(2) have|
|00001d20| 20 64 69 66 66 65 72 65 | 6e 74 20 6c 65 76 65 6c | differe|nt level|
|00001d30| 73 20 6f 66 0a 73 65 63 | 75 72 69 74 79 20 6f 72 |s of.sec|urity or|
|00001d40| 20 28 33 29 20 68 61 76 | 65 20 64 69 66 66 65 72 | (3) hav|e differ|
|00001d50| 65 6e 74 20 6f 70 65 72 | 61 74 69 6e 67 20 73 79 |ent oper|ating sy|
|00001d60| 73 74 65 6d 73 2e 20 0a | 0a 4c 65 73 74 20 74 68 |stems. .|.Lest th|
|00001d70| 69 73 20 73 65 65 6d 73 | 20 74 6f 6f 20 73 74 72 |is seems| too str|
|00001d80| 69 63 74 2c 20 62 65 20 | 61 73 73 75 72 65 64 20 |ict, be |assured |
|00001d90| 74 68 61 74 20 49 20 68 | 61 76 65 20 6f 6e 20 73 |that I h|ave on s|
|00001da0| 65 76 65 72 61 6c 0a 6f | 63 63 61 73 69 6f 6e 73 |everal.o|ccasions|
|00001db0| 20 62 72 6f 6b 65 6e 20 | 69 6e 74 6f 20 6d 61 63 | broken |into mac|
|00001dc0| 68 69 6e 65 73 20 62 79 | 20 67 69 76 69 6e 67 20 |hines by| giving |
|00001dd0| 70 72 69 76 69 6c 65 67 | 65 64 20 75 73 65 72 73 |privileg|ed users|
|00001de0| 20 6f 6e 20 74 68 65 0a | 74 61 72 67 65 74 20 6d | on the.|target m|
|00001df0| 61 63 68 69 6e 65 73 20 | 61 63 63 6f 75 6e 74 73 |achines |accounts|
|00001e00| 20 6f 6e 20 6f 6e 65 20 | 6f 66 20 6d 79 20 6f 77 | on one |of my ow|
|00001e10| 6e 20 61 6e 64 20 65 78 | 70 6c 6f 69 74 69 6e 67 |n and ex|ploiting|
|00001e20| 20 74 68 65 69 72 20 75 | 73 65 20 6f 66 0a 74 68 | their u|se of.th|
|00001e30| 65 20 73 61 6d 65 20 70 | 61 73 73 77 6f 72 64 20 |e same p|assword |
|00001e40| 6f 6e 20 62 6f 74 68 2e | 20 20 46 75 72 74 68 65 |on both.|  Furthe|
|00001e50| 72 2c 20 6d 61 63 68 69 | 6e 65 73 20 77 69 74 68 |r, machi|nes with|
|00001e60| 20 64 69 66 66 65 72 65 | 6e 74 20 6f 70 65 72 61 | differe|nt opera|
|00001e70| 74 69 6e 67 0a 73 79 73 | 74 65 6d 73 20 61 72 65 |ting.sys|tems are|
|00001e80| 20 69 6e 68 65 72 65 6e | 74 6c 79 20 76 75 6c 6e | inheren|tly vuln|
|00001e90| 65 72 61 62 6c 65 20 74 | 6f 20 64 69 66 66 65 72 |erable t|o differ|
|00001ea0| 65 6e 74 20 60 60 70 72 | 6f 67 72 61 6d 6d 69 6e |ent ``pr|ogrammin|
|00001eb0| 67 20 62 75 67 73 27 27 | 0a 61 6e 64 20 68 65 6e |g bugs''|.and hen|
|00001ec0| 63 65 20 62 79 20 68 61 | 76 69 6e 67 20 74 68 65 |ce by ha|ving the|
|00001ed0| 20 73 61 6d 65 20 70 61 | 73 73 77 6f 72 64 73 20 | same pa|sswords |
|00001ee0| 6f 6e 20 74 68 65 20 74 | 77 6f 20 6d 61 63 68 69 |on the t|wo machi|
|00001ef0| 6e 65 73 2c 20 65 61 63 | 68 0a 6d 61 63 68 69 6e |nes, eac|h.machin|
|00001f00| 65 20 69 73 20 6f 70 65 | 6e 20 74 6f 20 74 68 65 |e is ope|n to the|
|00001f10| 20 61 6c 6c 20 74 68 65 | 20 62 75 67 73 20 74 68 | all the| bugs th|
|00001f20| 61 74 20 63 6f 75 6c 64 | 20 65 78 69 73 74 20 6f |at could| exist o|
|00001f30| 6e 20 65 69 74 68 65 72 | 20 73 79 73 74 65 6d 2e |n either| system.|
|00001f40| 20 0a 0a 49 74 20 69 73 | 20 69 6e 74 65 72 65 73 | ..It is| interes|
|00001f50| 74 69 6e 67 20 28 62 75 | 74 20 6f 66 20 6c 69 74 |ting (bu|t of lit|
|00001f60| 74 6c 65 20 70 72 61 63 | 74 69 63 61 6c 20 76 61 |tle prac|tical va|
|00001f70| 6c 75 65 29 20 74 6f 20 | 6e 6f 74 65 20 74 68 61 |lue) to |note tha|
|00001f80| 74 20 61 6e 0a 61 74 74 | 61 63 6b 65 72 20 63 61 |t an.att|acker ca|
|00001f90| 6e 20 67 61 69 6e 20 61 | 20 63 72 79 70 74 6f 67 |n gain a| cryptog|
|00001fa0| 72 61 70 68 69 63 20 61 | 64 76 61 6e 74 61 67 65 |raphic a|dvantage|
|00001fb0| 20 62 79 20 68 61 76 69 | 6e 67 20 74 77 6f 20 64 | by havi|ng two d|
|00001fc0| 69 66 66 65 72 65 6e 74 | 0a 65 6e 63 72 79 70 74 |ifferent|.encrypt|
|00001fd0| 65 64 20 73 74 72 69 6e | 67 73 20 66 6f 72 20 74 |ed strin|gs for t|
|00001fe0| 68 65 20 73 61 6d 65 20 | 70 61 73 73 77 6f 72 64 |he same |password|
|00001ff0| 2e 20 20 54 68 69 73 20 | 77 6f 75 6c 64 20 68 61 |.  This |would ha|
|00002000| 70 70 65 6e 20 77 68 65 | 6e 20 74 68 65 0a 75 73 |ppen whe|n the.us|
|00002010| 65 72 20 68 61 73 20 74 | 68 65 20 73 61 6d 65 20 |er has t|he same |
|00002020| 70 61 73 73 77 6f 72 64 | 20 6f 6e 20 74 77 6f 20 |password| on two |
|00002030| 6d 61 63 68 69 6e 65 73 | 20 62 75 74 20 69 74 20 |machines| but it |
|00002040| 68 61 73 20 62 65 65 6e | 20 65 6e 63 72 79 70 74 |has been| encrypt|
|00002050| 65 64 0a 77 69 74 68 20 | 64 69 66 66 65 72 65 6e |ed.with |differen|
|00002060| 74 20 73 61 6c 74 73 2e | 20 20 49 6e 20 70 72 69 |t salts.|  In pri|
|00002070| 6e 63 69 70 6c 65 2c 20 | 74 68 69 73 20 6d 61 6b |nciple, |this mak|
|00002080| 65 73 20 68 6f 73 74 69 | 6c 65 20 64 65 63 72 79 |es hosti|le decry|
|00002090| 70 74 69 6f 6e 0a 6d 75 | 63 68 20 65 61 73 69 65 |ption.mu|ch easie|
|000020a0| 72 2e 20 20 49 6e 20 70 | 72 61 63 74 69 63 65 2c |r.  In p|ractice,|
|000020b0| 20 74 68 65 20 61 74 74 | 61 63 6b 20 6d 65 74 68 | the att|ack meth|
|000020c0| 6f 64 73 20 74 68 61 74 | 20 61 72 65 20 6d 6f 73 |ods that| are mos|
|000020d0| 74 20 6f 66 74 65 6e 20 | 75 73 65 64 0a 64 6f 20 |t often |used.do |
|000020e0| 6e 6f 74 20 65 78 70 6c | 6f 69 74 20 74 68 69 73 |not expl|oit this|
|000020f0| 2e 0a 0a 54 68 65 20 77 | 6f 72 73 74 20 6f 66 66 |...The w|orst off|
|00002100| 65 6e 64 65 72 73 20 6f | 66 20 74 68 65 20 60 60 |enders o|f the ``|
|00002110| 73 68 61 72 65 64 20 70 | 61 73 73 77 6f 72 64 20 |shared p|assword |
|00002120| 70 72 6f 62 6c 65 6d 27 | 27 09 61 72 65 20 6e 65 |problem'|'.are ne|
|00002130| 74 77 6f 72 6b 0a 6d 61 | 69 6e 74 65 6e 61 6e 63 |twork.ma|intenanc|
|00002140| 65 20 70 65 6f 70 6c 65 | 20 61 6e 64 20 74 65 61 |e people| and tea|
|00002150| 6d 73 2e 20 20 4f 66 74 | 65 6e 20 74 68 65 79 20 |ms.  Oft|en they |
|00002160| 77 61 6e 74 20 61 6e 20 | 61 63 63 6f 75 6e 74 20 |want an |account |
|00002170| 6f 6e 20 65 76 65 72 79 | 0a 6c 6f 63 61 6c 20 61 |on every|.local a|
|00002180| 72 65 61 20 6e 65 74 20 | 74 68 61 74 20 74 68 65 |rea net |that the|
|00002190| 79 20 73 65 72 76 69 63 | 65 2c 20 65 61 63 68 20 |y servic|e, each |
|000021a0| 77 69 74 68 20 74 68 65 | 20 73 61 6d 65 20 70 61 |with the| same pa|
|000021b0| 73 73 77 6f 72 64 2e 20 | 20 54 68 61 74 0a 77 61 |ssword. | That.wa|
|000021c0| 79 20 74 68 65 79 20 63 | 61 6e 20 65 78 61 6d 69 |y they c|an exami|
|000021d0| 6e 65 20 0a 6e 65 74 77 | 6f 72 6b 20 70 72 6f 62 |ne .netw|ork prob|
|000021e0| 6c 65 6d 73 20 61 6e 64 | 20 73 75 63 68 20 77 69 |lems and| such wi|
|000021f0| 74 68 6f 75 74 20 68 61 | 76 69 6e 67 20 74 6f 20 |thout ha|ving to |
|00002200| 6c 6f 6f 6b 20 75 70 20 | 68 75 6e 64 72 65 64 73 |look up |hundreds|
|00002210| 20 6f 66 0a 70 61 73 73 | 77 6f 72 64 73 2e 20 20 | of.pass|words.  |
|00002220| 0a 0a 57 68 69 6c 65 20 | 74 68 65 20 6e 65 74 77 |..While |the netw|
|00002230| 6f 72 6b 20 6d 61 69 6e | 74 61 69 6e 65 72 73 20 |ork main|tainers |
|00002240| 61 72 65 20 67 65 6e 65 | 72 61 6c 6c 79 20 28 62 |are gene|rally (b|
|00002250| 75 74 20 6e 6f 74 20 61 | 6c 77 61 79 73 29 20 67 |ut not a|lways) g|
|00002260| 6f 6f 64 0a 61 62 6f 75 | 74 20 70 69 63 6b 69 6e |ood.abou|t pickin|
|00002270| 67 20 72 65 61 73 6f 6e | 61 62 6c 65 20 70 61 73 |g reason|able pas|
|00002280| 73 77 6f 72 64 73 20 61 | 6e 64 20 6b 65 65 70 69 |swords a|nd keepi|
|00002290| 6e 67 20 74 68 65 6d 20 | 73 65 63 72 65 74 2c 20 |ng them |secret, |
|000022a0| 69 66 20 61 6e 79 20 6f | 6e 65 0a 6d 61 63 68 69 |if any o|ne.machi|
|000022b0| 6e 65 20 74 68 61 74 20 | 74 68 65 79 20 61 72 65 |ne that |they are|
|000022c0| 20 75 73 69 6e 67 20 68 | 61 73 20 61 20 72 65 61 | using h|as a rea|
|000022d0| 64 61 62 6c 65 20 70 61 | 73 73 77 6f 72 64 20 66 |dable pa|ssword f|
|000022e0| 69 6c 65 20 28 64 69 73 | 63 75 73 73 65 64 0a 62 |ile (dis|cussed.b|
|000022f0| 65 6c 6f 77 29 20 6f 72 | 20 69 73 20 65 76 65 72 |elow) or| is ever|
|00002300| 20 63 6f 6d 70 72 6f 6d | 69 73 65 64 2c 20 74 68 | comprom|ised, th|
|00002310| 69 73 20 70 61 73 73 77 | 6f 72 64 20 69 73 20 69 |is passw|ord is i|
|00002320| 74 73 65 6c 66 20 63 6f | 6d 70 72 6f 6d 69 73 65 |tself co|mpromise|
|00002330| 64 20 61 6e 64 0a 61 6e | 20 61 74 74 61 63 6b 65 |d and.an| attacke|
|00002340| 72 20 63 61 6e 20 67 61 | 69 6e 20 75 6e 61 75 74 |r can ga|in unaut|
|00002350| 68 6f 72 69 7a 65 64 20 | 61 63 63 65 73 73 20 74 |horized |access t|
|00002360| 6f 20 68 75 6e 64 72 65 | 64 73 20 6f 72 20 74 68 |o hundre|ds or th|
|00002370| 6f 75 73 61 6e 64 73 20 | 6f 66 0a 6d 61 63 68 69 |ousands |of.machi|
|00002380| 6e 65 73 2e 20 0a 0a 0a | 5c 73 75 62 73 75 62 73 |nes. ...|\subsubs|
|00002390| 65 63 74 69 6f 6e 7b 52 | 65 61 64 61 62 6c 65 20 |ection{R|eadable |
|000023a0| 50 61 73 73 77 6f 72 64 | 20 46 69 6c 65 73 7d 0a |Password| Files}.|
|000023b0| 0a 41 20 72 65 61 64 61 | 62 6c 65 20 70 61 73 73 |.A reada|ble pass|
|000023c0| 77 6f 72 64 20 66 69 6c | 65 20 69 73 20 61 6e 20 |word fil|e is an |
|000023d0| 61 63 63 69 64 65 6e 74 | 20 77 61 69 74 69 6e 67 |accident| waiting|
|000023e0| 20 74 6f 20 68 61 70 70 | 65 6e 2e 20 20 57 69 74 | to happ|en.  Wit|
|000023f0| 68 0a 61 63 63 65 73 73 | 20 74 6f 20 74 68 65 20 |h.access| to the |
|00002400| 65 6e 63 72 79 70 74 65 | 64 20 70 61 73 73 77 6f |encrypte|d passwo|
|00002410| 72 64 20 61 6e 20 61 74 | 74 61 63 6b 65 72 20 63 |rd an at|tacker c|
|00002420| 61 6e 20 67 75 65 73 73 | 20 70 61 73 73 77 6f 72 |an guess| passwor|
|00002430| 64 73 20 61 74 0a 68 69 | 73 20 6c 65 69 73 75 72 |ds at.hi|s leisur|
|00002440| 65 20 77 69 74 68 6f 75 | 74 20 79 6f 75 20 62 65 |e withou|t you be|
|00002450| 69 6e 67 20 61 62 6c 65 | 20 74 6f 20 74 65 6c 6c |ing able| to tell|
|00002460| 20 74 68 61 74 20 68 65 | 20 69 73 20 64 6f 69 6e | that he| is doin|
|00002470| 67 20 73 6f 2e 20 20 4f | 6e 63 65 0a 68 65 20 68 |g so.  O|nce.he h|
|00002480| 61 73 20 61 20 63 6f 72 | 72 65 63 74 20 70 61 73 |as a cor|rect pas|
|00002490| 73 77 6f 72 64 2c 20 68 | 65 20 63 61 6e 20 74 68 |sword, h|e can th|
|000024a0| 65 6e 20 61 63 63 65 73 | 73 20 79 6f 75 72 20 6d |en acces|s your m|
|000024b0| 61 63 68 69 6e 65 20 61 | 73 20 74 68 61 74 0a 75 |achine a|s that.u|
|000024c0| 73 65 72 2e 20 20 49 6e | 20 74 68 65 20 63 61 73 |ser.  In| the cas|
|000024d0| 65 20 6f 66 20 63 65 72 | 74 61 69 6e 20 6f 70 65 |e of cer|tain ope|
|000024e0| 72 61 74 69 6e 67 20 73 | 79 73 74 65 6d 73 2c 20 |rating s|ystems, |
|000024f0| 69 6e 63 6c 75 64 69 6e | 67 20 6f 6c 64 65 72 0a |includin|g older.|
|00002500| 76 65 72 73 69 6f 6e 73 | 20 6f 66 20 56 4d 53 2c |versions| of VMS,|
|00002510| 20 74 68 65 72 65 20 69 | 73 20 61 20 77 65 6c 6c | there i|s a well|
|00002520| 20 6b 6e 6f 77 20 69 6e | 76 65 72 73 69 6f 6e 20 | know in|version |
|00002530| 66 6f 72 20 74 68 65 20 | 70 61 73 73 77 6f 72 64 |for the |password|
|00002540| 0a 65 6e 63 72 79 70 74 | 69 6f 6e 20 61 6c 67 6f |.encrypt|ion algo|
|00002550| 72 69 74 68 6d 20 61 6e | 64 20 68 65 6e 63 65 20 |rithm an|d hence |
|00002560| 74 68 65 20 61 74 74 61 | 63 6b 65 72 20 64 6f 65 |the atta|cker doe|
|00002570| 73 6e 27 74 20 6e 65 65 | 64 20 74 6f 20 67 75 65 |sn't nee|d to gue|
|00002580| 73 73 20 61 74 0a 61 6c | 6c 20 6f 6e 63 65 20 68 |ss at.al|l once h|
|00002590| 65 20 0a 63 61 6e 20 72 | 65 61 64 20 74 68 65 20 |e .can r|ead the |
|000025a0| 70 61 73 73 77 6f 72 64 | 20 66 69 6c 65 2e 0a 0a |password| file...|
|000025b0| 43 68 61 6e 67 69 6e 67 | 20 74 68 65 20 65 6e 63 |Changing| the enc|
|000025c0| 72 79 70 74 69 6f 6e 20 | 6d 65 74 68 6f 64 20 74 |ryption |method t|
|000025d0| 6f 20 73 6f 6d 65 20 6f | 74 68 65 72 20 6d 65 74 |o some o|ther met|
|000025e0| 68 6f 64 20 74 68 61 74 | 20 69 73 20 61 6c 73 6f |hod that| is also|
|000025f0| 20 70 75 62 6c 69 63 61 | 6c 6c 79 20 6b 6e 6f 77 | publica|lly know|
|00002600| 6e 0a 64 6f 65 73 6e 27 | 74 20 68 65 6c 70 20 74 |n.doesn'|t help t|
|00002610| 68 69 73 20 73 65 74 20 | 6f 66 20 70 72 6f 62 6c |his set |of probl|
|00002620| 65 6d 73 2c 20 65 76 65 | 6e 20 69 66 20 74 68 65 |ems, eve|n if the|
|00002630| 20 63 72 79 70 74 6f 2d | 73 79 73 74 65 6d 20 69 | crypto-|system i|
|00002640| 74 73 65 6c 66 0a 69 73 | 20 6d 75 63 68 20 73 74 |tself.is| much st|
|00002650| 72 6f 6e 67 65 72 2e 20 | 20 54 68 65 0a 77 65 61 |ronger. | The.wea|
|00002660| 6b 6e 65 73 73 20 68 65 | 72 65 20 69 73 20 6e 6f |kness he|re is no|
|00002670| 74 20 69 6e 20 74 68 65 | 20 63 72 79 70 74 6f 2d |t in the| crypto-|
|00002680| 73 79 73 74 65 6d 20 62 | 75 74 20 72 61 74 68 65 |system b|ut rathe|
|00002690| 72 20 69 6e 20 74 68 65 | 20 65 61 73 65 20 6f 66 |r in the| ease of|
|000026a0| 0a 6d 61 6b 69 6e 67 20 | 67 75 65 73 73 65 73 2e |.making |guesses.|
|000026b0| 0a 0a 49 74 20 69 73 20 | 76 69 74 61 6c 20 74 6f |..It is |vital to|
|000026c0| 20 70 72 6f 74 65 63 74 | 20 79 6f 75 72 20 70 61 | protect| your pa|
|000026d0| 73 73 77 6f 72 64 20 66 | 69 6c 65 20 66 72 6f 6d |ssword f|ile from|
|000026e0| 20 62 65 69 6e 67 20 72 | 65 61 64 2e 20 20 54 68 | being r|ead.  Th|
|000026f0| 65 72 65 20 61 72 65 0a | 74 77 6f 20 70 61 72 74 |ere are.|two part|
|00002700| 73 20 74 6f 20 74 68 69 | 73 2e 20 20 46 69 72 73 |s to thi|s.  Firs|
|00002710| 74 20 79 6f 75 20 73 68 | 6f 75 6c 64 20 70 72 65 |t you sh|ould pre|
|00002720| 76 65 6e 74 20 61 6e 6f | 6e 79 6d 6f 75 73 20 66 |vent ano|nymous f|
|00002730| 69 6c 65 20 74 72 61 6e | 73 66 65 72 73 0a 66 72 |ile tran|sfers.fr|
|00002740| 6f 6d 20 62 65 20 61 62 | 6c 65 20 74 6f 20 72 65 |om be ab|le to re|
|00002750| 6d 6f 76 65 20 61 20 63 | 6f 70 79 20 6f 66 20 74 |move a c|opy of t|
|00002760| 68 65 20 70 61 73 73 77 | 6f 72 64 20 66 69 6c 65 |he passw|ord file|
|00002770| 2e 20 20 57 68 69 6c 65 | 20 74 68 69 73 20 69 73 |.  While| this is|
|00002780| 20 67 65 6e 65 72 61 6c | 6c 79 0a 76 65 72 79 20 | general|ly.very |
|00002790| 65 61 73 79 20 74 6f 20 | 64 6f 20 63 6f 72 72 65 |easy to |do corre|
|000027a0| 63 74 6c 79 2c 20 74 68 | 65 72 65 20 69 73 20 61 |ctly, th|ere is a|
|000027b0| 20 63 6f 6d 6d 6f 6e 20 | 6d 69 73 74 61 6b 65 20 | common |mistake |
|000027c0| 77 6f 72 74 68 20 61 76 | 6f 69 64 69 6e 67 2e 20 |worth av|oiding. |
|000027d0| 20 4d 6f 73 74 20 66 69 | 6c 65 0a 74 72 61 6e 73 | Most fi|le.trans|
|000027e0| 66 65 72 20 66 61 63 69 | 6c 69 74 69 65 73 20 61 |fer faci|lities a|
|000027f0| 6c 6c 6f 77 20 79 6f 75 | 20 74 6f 20 72 65 73 74 |llow you| to rest|
|00002800| 72 69 63 74 20 74 68 65 | 20 70 61 72 74 20 6f 66 |rict the| part of|
|00002810| 20 74 68 65 20 66 69 6c | 65 20 73 79 73 74 65 6d | the fil|e system|
|00002820| 0a 66 72 6f 6d 20 77 68 | 69 63 68 20 20 75 6e 61 |.from wh|ich  una|
|00002830| 75 74 68 65 6e 74 69 63 | 61 74 65 64 20 74 72 61 |uthentic|ated tra|
|00002840| 6e 73 66 65 72 73 20 63 | 61 6e 20 62 65 20 6d 61 |nsfers c|an be ma|
|00002850| 64 65 2e 20 20 49 74 20 | 69 73 20 6e 65 63 65 73 |de.  It |is neces|
|00002860| 73 61 72 79 20 74 6f 0a | 70 75 74 20 61 20 70 61 |sary to.|put a pa|
|00002870| 72 74 69 61 6c 20 70 61 | 73 73 77 6f 72 64 20 66 |rtial pa|ssword f|
|00002880| 69 6c 65 20 69 6e 20 74 | 68 69 73 20 73 75 62 73 |ile in t|his subs|
|00002890| 65 63 74 69 6f 6e 20 73 | 6f 20 74 68 61 74 20 61 |ection s|o that a|
|000028a0| 6e 20 61 6e 6f 6e 79 6d | 6f 75 73 20 61 67 65 6e |n anonym|ous agen|
|000028b0| 74 0a 6b 6e 6f 77 73 20 | 60 60 77 68 6f 20 69 74 |t.knows |``who it|
|000028c0| 20 28 69 74 73 65 6c 66 | 29 20 69 73 27 27 2e 20 | (itself|) is''. |
|000028d0| 20 4d 61 6e 79 20 73 69 | 74 65 73 20 68 61 76 65 | Many si|tes have|
|000028e0| 20 70 75 74 20 63 6f 6d | 70 6c 65 74 65 20 70 61 | put com|plete pa|
|000028f0| 73 73 77 6f 72 64 0a 66 | 69 6c 65 73 20 68 65 72 |ssword.f|iles her|
|00002900| 65 20 64 65 66 65 61 74 | 69 6e 67 20 6f 6e 65 20 |e defeat|ing one |
|00002910| 6f 66 20 74 68 65 20 6d | 6f 73 74 20 69 6d 70 6f |of the m|ost impo|
|00002920| 72 74 61 6e 74 20 70 75 | 72 70 6f 73 65 73 20 6f |rtant pu|rposes o|
|00002930| 66 20 74 68 65 0a 72 65 | 73 74 72 69 63 74 69 6f |f the.re|strictio|
|00002940| 6e 73 2e 20 28 4f 66 20 | 63 6f 75 72 73 65 20 77 |ns. (Of |course w|
|00002950| 69 74 68 6f 75 74 20 74 | 68 69 73 20 72 65 73 74 |ithout t|his rest|
|00002960| 72 69 63 74 69 6f 6e 20 | 60 60 57 6f 72 6c 64 20 |riction |``World |
|00002970| 52 65 61 64 61 62 6c 65 | 27 27 0a 74 61 6b 65 73 |Readable|''.takes|
|00002980| 20 6f 6e 20 61 20 76 65 | 72 79 20 6c 69 74 65 72 | on a ve|ry liter|
|00002990| 61 6c 20 6d 65 61 6e 69 | 6e 67 5c 64 6f 74 73 29 |al meani|ng\dots)|
|000029a0| 0a 0a 54 68 65 20 73 65 | 63 6f 6e 64 20 70 61 72 |..The se|cond par|
|000029b0| 74 20 6f 66 20 74 68 65 | 20 73 6f 6c 75 74 69 6f |t of the| solutio|
|000029c0| 6e 20 69 73 20 73 6f 6d | 65 77 68 61 74 20 68 61 |n is som|ewhat ha|
|000029d0| 72 64 65 72 2e 20 20 54 | 68 69 73 20 69 73 20 74 |rder.  T|his is t|
|000029e0| 6f 0a 70 72 65 76 65 6e | 74 20 75 6e 70 72 69 76 |o.preven|t unpriv|
|000029f0| 69 6c 65 67 65 64 20 75 | 73 65 72 73 20 77 68 6f |ileged u|sers who|
|00002a00| 20 61 72 65 20 75 73 69 | 6e 67 20 74 68 65 20 73 | are usi|ng the s|
|00002a10| 79 73 74 65 6d 20 66 72 | 6f 6d 20 72 65 61 64 69 |ystem fr|om readi|
|00002a20| 6e 67 20 74 68 65 0a 65 | 6e 63 72 79 70 74 65 64 |ng the.e|ncrypted|
|00002a30| 20 70 61 73 73 77 6f 72 | 64 20 66 72 6f 6d 20 74 | passwor|d from t|
|00002a40| 68 65 20 70 61 73 73 77 | 6f 72 64 20 66 69 6c 65 |he passw|ord file|
|00002a50| 2e 20 20 54 68 65 20 72 | 65 61 73 6f 6e 20 74 68 |.  The r|eason th|
|00002a60| 61 74 20 74 68 69 73 20 | 69 73 0a 64 69 66 66 69 |at this |is.diffi|
|00002a70| 63 75 6c 74 20 69 73 20 | 74 68 61 74 20 74 68 65 |cult is |that the|
|00002a80| 20 70 61 73 73 77 6f 72 | 64 20 66 69 6c 65 20 68 | passwor|d file h|
|00002a90| 61 73 20 61 20 67 72 65 | 61 74 20 64 65 61 6c 20 |as a gre|at deal |
|00002aa0| 6f 66 20 69 6e 66 6f 72 | 6d 61 74 69 6f 6e 0a 74 |of infor|mation.t|
|00002ab0| 68 61 74 20 70 65 6f 70 | 6c 65 20 61 6e 64 20 70 |hat peop|le and p|
|00002ac0| 72 6f 67 72 61 6d 73 20 | 6e 65 65 64 20 69 6e 20 |rograms |need in |
|00002ad0| 69 74 20 6f 74 68 65 72 | 20 74 68 61 6e 20 74 68 |it other| than th|
|00002ae0| 65 20 70 61 73 73 77 6f | 72 64 73 0a 74 68 65 6d |e passwo|rds.them|
|00002af0| 73 65 6c 76 65 73 2e 20 | 20 53 6f 6d 65 20 76 65 |selves. | Some ve|
|00002b00| 72 73 69 6f 6e 20 6f 66 | 20 73 6f 6d 65 20 6f 70 |rsion of| some op|
|00002b10| 65 72 61 74 69 6e 67 20 | 73 79 73 74 65 6d 73 20 |erating |systems |
|00002b20| 68 61 76 65 20 70 72 69 | 76 69 6c 65 67 65 64 0a |have pri|vileged.|
|00002b30| 63 61 6c 6c 73 20 74 6f | 20 68 61 6e 64 6c 65 20 |calls to| handle |
|00002b40| 74 68 65 20 64 65 74 61 | 69 6c 73 20 6f 66 20 61 |the deta|ils of a|
|00002b50| 6c 6c 20 74 68 69 73 20 | 61 6e 64 20 68 65 6e 63 |ll this |and henc|
|00002b60| 65 20 74 68 65 69 72 20 | 75 74 69 6c 69 74 69 65 |e their |utilitie|
|00002b70| 73 20 68 61 76 65 0a 61 | 6c 72 65 61 64 79 20 62 |s have.a|lready b|
|00002b80| 65 65 6e 20 77 72 69 74 | 74 65 6e 20 74 6f 20 61 |een writ|ten to a|
|00002b90| 6c 6c 6f 77 20 70 72 6f | 74 65 63 74 69 6f 6e 20 |llow pro|tection |
|00002ba0| 6f 66 20 74 68 65 20 65 | 6e 63 72 79 70 74 65 64 |of the e|ncrypted|
|00002bb0| 20 70 61 73 73 77 6f 72 | 64 73 2e 0a 0a 4d 6f 73 | passwor|ds...Mos|
|00002bc0| 74 20 6f 66 20 74 68 65 | 20 63 75 72 72 65 6e 74 |t of the| current|
|00002bd0| 20 76 65 72 73 69 6f 6e | 73 20 6f 66 20 55 6e 69 | version|s of Uni|
|00002be0| 78 20 61 72 65 20 7b 5c | 65 6d 20 6e 6f 74 5c 2f |x are {\|em not\/|
|00002bf0| 7d 20 61 6d 6f 6e 67 20 | 6f 66 20 74 68 65 73 65 |} among |of these|
|00002c00| 0a 73 79 73 74 65 6d 73 | 2e 20 20 42 65 72 6b 65 |.systems|.  Berke|
|00002c10| 6c 65 79 20 68 61 73 20 | 64 69 73 74 72 69 62 75 |ley has |distribu|
|00002c20| 74 65 64 20 61 20 73 65 | 74 20 6f 66 20 70 61 74 |ted a se|t of pat|
|00002c30| 63 68 65 73 20 74 6f 20 | 69 6e 63 6f 72 70 6f 72 |ches to |incorpor|
|00002c40| 61 74 65 0a 74 68 69 73 | 20 73 65 70 61 72 61 74 |ate.this| separat|
|00002c50| 69 6f 6e 20 28 63 61 6c | 6c 65 64 20 73 68 61 64 |ion (cal|led shad|
|00002c60| 6f 77 20 70 61 73 73 77 | 6f 72 64 73 29 20 61 6e |ow passw|ords) an|
|00002c70| 64 20 74 68 65 20 6c 61 | 74 65 73 74 20 76 65 72 |d the la|test ver|
|00002c80| 73 69 6f 6e 20 6f 66 0a | 74 68 65 20 53 75 6e 4f |sion of.|the SunO|
|00002c90| 53 20 68 61 73 20 66 61 | 63 69 6c 69 74 69 65 73 |S has fa|cilities|
|00002ca0| 20 66 6f 72 20 69 74 2e | 20 20 46 6f 72 20 74 68 | for it.|  For th|
|00002cb0| 6f 73 65 20 77 68 6f 20 | 61 72 65 20 75 73 69 6e |ose who |are usin|
|00002cc0| 67 20 61 6e 20 6f 70 65 | 72 61 74 69 6e 67 0a 73 |g an ope|rating.s|
|00002cd0| 79 73 74 65 6d 20 74 68 | 61 74 20 64 6f 65 73 20 |ystem th|at does |
|00002ce0| 6e 6f 74 20 79 65 74 20 | 68 61 76 65 20 73 68 61 |not yet |have sha|
|00002cf0| 64 6f 77 20 70 61 73 73 | 77 6f 72 64 73 20 61 6e |dow pass|words an|
|00002d00| 64 20 63 61 6e 6e 6f 74 | 20 75 73 65 20 6f 6e 65 |d cannot| use one|
|00002d10| 20 6f 66 0a 74 68 65 20 | 6e 65 77 20 72 65 6c 65 | of.the |new rele|
|00002d20| 61 73 65 73 2c 20 61 20 | 6e 75 6d 62 65 72 20 6f |ases, a |number o|
|00002d30| 66 20 61 64 20 68 6f 63 | 20 73 68 61 64 6f 77 69 |f ad hoc| shadowi|
|00002d40| 6e 67 20 73 79 73 74 65 | 6d 73 20 68 61 76 65 20 |ng syste|ms have |
|00002d50| 62 65 65 6e 0a 64 65 76 | 65 6c 6f 70 65 64 2e 20 |been.dev|eloped. |
|00002d60| 20 4f 6e 65 20 63 61 6e | 20 69 6e 73 74 61 6c 6c | One can| install|
|00002d70| 20 73 68 61 64 6f 77 20 | 70 61 73 73 77 6f 72 64 | shadow |password|
|00002d80| 73 20 62 79 20 65 64 69 | 74 69 6e 67 20 74 68 65 |s by edi|ting the|
|00002d90| 20 62 69 6e 61 72 69 65 | 73 0a 6f 66 20 7b 5c 74 | binarie|s.of {\t|
|00002da0| 74 20 2f 62 69 6e 2f 6c | 6f 67 69 6e 7d 2c 20 7b |t /bin/l|ogin}, {|
|00002db0| 5c 74 74 20 2f 62 69 6e | 2f 70 61 73 73 77 64 7d |\tt /bin|/passwd}|
|00002dc0| 20 61 6e 64 20 73 69 6d | 69 6c 61 72 20 70 72 6f | and sim|ilar pro|
|00002dd0| 67 72 61 6d 73 20 74 68 | 61 74 0a 61 63 74 75 61 |grams th|at.actua|
|00002de0| 6c 6c 79 20 6e 65 65 64 | 20 74 6f 20 0a 75 73 65 |lly need| to .use|
|00002df0| 20 74 68 65 20 70 61 73 | 73 77 6f 72 64 20 66 69 | the pas|sword fi|
|00002e00| 65 6c 64 73 20 61 6e 64 | 20 74 68 65 6e 20 6d 6f |elds and| then mo|
|00002e10| 64 69 66 79 20 7b 5c 74 | 74 20 2f 65 74 63 2f 76 |dify {\t|t /etc/v|
|00002e20| 69 70 77 7d 20 74 6f 20 | 77 6f 72 6b 20 77 69 74 |ipw} to |work wit|
|00002e30| 68 0a 62 6f 74 68 20 0a | 74 68 65 20 64 69 6d 69 |h.both .|the dimi|
|00002e40| 6e 69 73 68 65 64 20 61 | 6e 64 20 73 68 61 64 6f |nished a|nd shado|
|00002e50| 77 20 70 61 73 73 77 6f | 72 64 20 66 69 6c 65 73 |w passwo|rd files|
|00002e60| 2e 0a 0a 4f 66 20 63 6f | 75 72 73 65 2c 20 73 69 |...Of co|urse, si|
|00002e70| 6e 63 65 20 6d 6f 73 74 | 20 6f 66 20 75 73 20 75 |nce most| of us u|
|00002e80| 73 65 20 62 72 6f 61 64 | 63 61 73 74 20 6e 65 74 |se broad|cast net|
|00002e90| 73 2c 20 74 68 65 72 65 | 20 69 73 20 61 20 72 65 |s, there| is a re|
|00002ea0| 61 6c 20 64 61 6e 67 65 | 72 0a 6f 66 20 70 61 73 |al dange|r.of pas|
|00002eb0| 73 77 6f 72 64 73 20 62 | 65 69 6e 67 20 73 65 65 |swords b|eing see|
|00002ec0| 6e 20 61 73 20 74 68 65 | 79 20 67 6f 20 6f 76 65 |n as the|y go ove|
|00002ed0| 72 20 74 68 65 20 77 69 | 72 65 2e 20 20 54 68 69 |r the wi|re.  Thi|
|00002ee0| 73 20 63 6c 61 73 73 20 | 6f 66 0a 70 72 6f 62 6c |s class |of.probl|
|00002ef0| 65 6d 73 20 69 73 20 64 | 69 73 63 75 73 73 65 64 |ems is d|iscussed|
|00002f00| 20 69 6e 20 74 68 65 20 | 5c 62 72 6f 61 64 63 61 | in the |\broadca|
|00002f10| 73 74 5c 20 61 6e 64 20 | 5c 67 75 65 73 74 73 2e |st\ and |\guests.|
|00002f20| 20 0a 0a 4b 65 72 62 65 | 72 6f 73 2c 20 64 65 76 | ..Kerbe|ros, dev|
|00002f30| 65 6c 6f 70 65 64 20 61 | 74 20 4d 49 54 27 73 20 |eloped a|t MIT's |
|00002f40| 41 74 68 65 6e 61 20 70 | 72 6f 6a 65 63 74 20 68 |Athena p|roject h|
|00002f50| 61 73 20 61 6e 20 61 6c | 74 65 72 6e 61 74 69 76 |as an al|ternativ|
|00002f60| 65 20 6d 65 61 6e 73 0a | 6f 66 20 68 61 6e 64 6c |e means.|of handl|
|00002f70| 69 6e 67 20 70 61 73 73 | 77 6f 72 64 73 2e 20 20 |ing pass|words.  |
|00002f80| 49 74 20 61 6c 6c 6f 77 | 73 20 6f 6e 65 20 74 6f |It allow|s one to|
|00002f90| 20 72 65 6d 6f 76 65 20 | 61 6c 6c 20 74 68 65 20 | remove |all the |
|00002fa0| 70 61 73 73 77 6f 72 64 | 73 20 66 72 6f 6d 0a 74 |password|s from.t|
|00002fb0| 68 65 20 6e 6f 72 6d 61 | 6c 20 75 73 65 20 6d 61 |he norma|l use ma|
|00002fc0| 63 68 69 6e 65 73 20 61 | 6e 64 20 74 6f 20 6e 65 |chines a|nd to ne|
|00002fd0| 76 65 72 20 68 61 76 65 | 20 74 68 65 6d 20 62 72 |ver have| them br|
|00002fe0| 6f 61 64 63 61 73 74 65 | 64 20 69 6e 20 63 6c 65 |oadcaste|d in cle|
|00002ff0| 61 72 0a 74 65 78 74 2e | 20 20 57 68 69 6c 65 20 |ar.text.|  While |
|00003000| 4b 65 72 62 65 72 6f 73 | 20 69 73 20 76 75 6c 6e |Kerberos| is vuln|
|00003010| 65 72 61 62 6c 65 20 74 | 6f 20 61 20 6e 75 6d 62 |erable t|o a numb|
|00003020| 65 72 20 6f 66 20 69 6e | 74 65 72 65 73 74 69 6e |er of in|terestin|
|00003030| 67 0a 70 61 73 73 77 6f | 72 64 20 67 75 65 73 73 |g.passwo|rd guess|
|00003040| 69 6e 67 20 61 6e 64 20 | 63 72 79 70 74 6f 67 72 |ing and |cryptogr|
|00003050| 61 70 68 69 63 20 61 74 | 74 61 63 6b 73 20 61 6e |aphic at|tacks an|
|00003060| 64 20 63 75 72 72 65 6e | 74 6c 79 20 68 61 73 20 |d curren|tly has |
|00003070| 70 72 6f 62 6c 65 6d 73 | 0a 77 69 74 68 20 6d 75 |problems|.with mu|
|00003080| 6c 74 69 2d 68 6f 6d 65 | 20 6d 61 63 68 69 6e 65 |lti-home| machine|
|00003090| 73 20 28 48 6f 73 74 73 | 20 77 69 74 68 20 6d 6f |s (Hosts| with mo|
|000030a0| 72 65 20 74 68 61 6e 20 | 6f 6e 65 20 49 50 20 61 |re than |one IP a|
|000030b0| 64 64 72 65 73 73 29 2c | 20 69 74 0a 64 6f 65 73 |ddress),| it.does|
|000030c0| 20 70 72 6f 76 69 64 65 | 20 74 68 65 20 66 69 72 | provide| the fir|
|000030d0| 73 74 20 70 72 61 63 74 | 69 63 61 6c 20 61 74 74 |st pract|ical att|
|000030e0| 65 6d 70 74 20 61 6e 64 | 20 6e 65 74 77 6f 72 6b |empt and| network|
|000030f0| 20 73 65 63 75 72 69 74 | 79 20 66 6f 72 20 61 0a | securit|y for a.|
|00003100| 75 6e 69 76 65 72 73 69 | 74 79 20 65 6e 76 69 72 |universi|ty envir|
|00003110| 6f 6e 6d 65 6e 74 2e 0a | 0a 41 6e 20 6f 66 74 65 |onment..|.An ofte|
|00003120| 6e 20 6f 76 65 72 6c 6f | 6f 6b 65 64 20 69 73 73 |n overlo|oked iss|
|00003130| 75 65 20 69 73 20 74 68 | 61 74 20 6f 66 20 70 61 |ue is th|at of pa|
|00003140| 73 73 77 6f 72 64 73 20 | 66 6f 72 20 67 61 6d 65 |sswords |for game|
|00003150| 73 2e 20 20 4d 61 6e 79 | 0a 6d 75 6c 74 69 70 6c |s.  Many|.multipl|
|00003160| 61 79 65 72 20 63 6f 6d | 70 75 74 65 72 20 67 61 |ayer com|puter ga|
|00003170| 6d 65 73 2c 20 73 75 63 | 68 20 61 73 20 60 60 58 |mes, suc|h as ``X|
|00003180| 74 72 65 6b 27 27 20 61 | 6e 64 20 60 60 45 6d 70 |trek'' a|nd ``Emp|
|00003190| 69 72 65 27 27 20 72 65 | 71 75 69 72 65 0a 74 68 |ire'' re|quire.th|
|000031a0| 65 20 75 73 65 72 20 74 | 6f 20 73 75 70 70 6c 79 |e user t|o supply|
|000031b0| 20 61 20 70 61 73 73 77 | 6f 72 64 20 74 6f 20 70 | a passw|ord to p|
|000031c0| 72 65 76 65 6e 74 20 75 | 73 65 72 73 20 66 72 6f |revent u|sers fro|
|000031d0| 6d 20 69 6d 70 65 72 73 | 6f 6e 61 74 69 6e 67 20 |m impers|onating |
|000031e0| 6f 6e 65 0a 61 6e 6f 74 | 68 65 72 20 64 75 72 69 |one.anot|her duri|
|000031f0| 6e 67 20 74 68 65 20 67 | 61 6d 65 2e 20 20 47 65 |ng the g|ame.  Ge|
|00003200| 6e 65 72 61 6c 6c 79 20 | 74 68 65 73 65 20 70 61 |nerally |these pa|
|00003210| 73 73 77 6f 72 64 73 20 | 61 72 65 20 73 74 6f 72 |sswords |are stor|
|00003220| 65 64 20 62 79 20 74 68 | 65 0a 67 61 6d 65 20 69 |ed by th|e.game i|
|00003230| 74 73 65 6c 66 20 61 6e | 64 20 61 72 65 20 69 6e |tself an|d are in|
|00003240| 20 70 72 69 6e 63 69 70 | 6c 65 20 75 6e 72 65 6c | princip|le unrel|
|00003250| 61 74 65 64 20 74 6f 20 | 74 68 65 20 70 61 73 73 |ated to |the pass|
|00003260| 77 6f 72 64 73 20 74 68 | 61 74 20 74 68 65 0a 6f |words th|at the.o|
|00003270| 70 65 72 61 74 69 6e 67 | 20 73 79 73 74 65 6d 20 |perating| system |
|00003280| 69 74 73 65 6c 66 20 75 | 73 65 73 2e 20 20 55 6e |itself u|ses.  Un|
|00003290| 66 6f 72 74 75 6e 61 74 | 65 6c 79 2c 20 74 68 65 |fortunat|ely, the|
|000032a0| 73 65 20 70 61 73 73 77 | 6f 72 64 73 20 61 72 65 |se passw|ords are|
|000032b0| 0a 67 65 6e 65 72 61 6c | 6c 79 20 73 74 6f 72 65 |.general|ly store|
|000032c0| 64 20 75 6e 65 6e 63 72 | 79 70 74 65 64 20 61 6e |d unencr|ypted an|
|000032d0| 64 20 73 6f 6d 65 20 75 | 73 65 72 73 20 75 73 65 |d some u|sers use|
|000032e0| 20 74 68 65 20 73 61 6d | 65 20 70 61 73 73 77 6f | the sam|e passwo|
|000032f0| 72 64 20 61 73 0a 74 68 | 65 79 20 64 6f 20 66 6f |rd as.th|ey do fo|
|00003300| 72 20 6c 6f 67 67 69 6e | 67 20 69 6e 74 6f 20 74 |r loggin|g into t|
|00003310| 68 65 20 6d 61 63 68 69 | 6e 65 20 69 74 73 65 6c |he machi|ne itsel|
|00003320| 66 2e 20 20 53 6f 6d 65 | 20 67 61 6d 65 73 20 6e |f.  Some| games n|
|00003330| 6f 77 0a 65 78 70 6c 69 | 63 69 74 6c 79 20 77 61 |ow.expli|citly wa|
|00003340| 72 6e 20 74 68 65 20 75 | 73 65 72 73 20 6e 6f 74 |rn the u|sers not|
|00003350| 20 75 73 65 20 68 69 73 | 20 6c 6f 67 69 6e 20 70 | use his| login p|
|00003360| 61 73 73 77 6f 72 64 73 | 2e 20 20 50 65 72 68 61 |asswords|.  Perha|
|00003370| 70 73 20 74 68 65 73 65 | 0a 67 61 6d 65 73 20 77 |ps these|.games w|
|00003380| 69 6c 6c 20 65 76 65 6e | 74 75 61 6c 6c 79 20 63 |ill even|tually c|
|00003390| 68 65 63 6b 20 74 68 61 | 74 20 74 68 65 20 70 61 |heck tha|t the pa|
|000033a0| 73 73 77 6f 72 64 20 69 | 73 20 69 6e 64 65 65 64 |ssword i|s indeed|
|000033b0| 20 6e 6f 74 20 74 68 65 | 20 73 61 6d 65 0a 61 73 | not the| same.as|
|000033c0| 20 74 68 65 20 6c 6f 67 | 69 6e 20 70 61 73 73 77 | the log|in passw|
|000033d0| 6f 72 64 2e 0a 0a 0a 0a | 0a 0a 0a 5c 73 75 62 73 |ord.....|...\subs|
|000033e0| 75 62 73 65 63 74 69 6f | 6e 7b 4d 61 6e 79 20 66 |ubsectio|n{Many f|
|000033f0| 61 63 65 73 20 6f 66 20 | 61 20 70 65 72 73 6f 6e |aces of |a person|
|00003400| 7d 0a 41 20 73 69 6e 67 | 6c 65 20 69 6e 64 69 76 |}.A sing|le indiv|
|00003410| 69 64 75 61 6c 20 63 61 | 6e 20 68 61 76 65 20 6d |idual ca|n have m|
|00003420| 61 6e 79 20 64 69 66 66 | 65 72 65 6e 74 20 72 65 |any diff|erent re|
|00003430| 6c 61 74 69 6f 6e 73 68 | 69 70 73 20 74 6f 20 61 |lationsh|ips to a|
|00003440| 0a 63 6f 6d 70 75 74 65 | 72 20 61 74 20 64 69 66 |.compute|r at dif|
|00003450| 66 65 72 65 6e 74 20 74 | 69 6d 65 73 2e 20 20 54 |ferent t|imes.  T|
|00003460| 68 65 20 73 79 73 74 65 | 6d 20 70 72 6f 67 72 61 |he syste|m progra|
|00003470| 6d 6d 65 72 73 20 61 72 | 65 20 61 63 74 69 6e 67 |mmers ar|e acting|
|00003480| 20 61 73 0a 60 60 6a 75 | 73 74 20 75 73 65 72 73 | as.``ju|st users|
|00003490| 27 27 20 77 68 65 6e 20 | 74 68 65 79 20 72 65 61 |'' when |they rea|
|000034a0| 64 20 74 68 65 69 72 20 | 6d 61 69 6c 20 6f 72 20 |d their |mail or |
|000034b0| 70 6c 61 79 20 61 20 63 | 6f 6d 70 75 74 65 72 20 |play a c|omputer |
|000034c0| 67 61 6d 65 2e 20 20 49 | 6e 0a 6d 61 6e 79 20 6f |game.  I|n.many o|
|000034d0| 70 65 72 61 74 69 6e 67 | 20 73 79 73 74 65 6d 73 |perating| systems|
|000034e0| 2c 20 61 20 70 65 72 73 | 6f 6e 20 67 65 74 73 20 |, a pers|on gets |
|000034f0| 61 6c 6c 20 6f 66 20 68 | 69 73 20 70 72 69 76 69 |all of h|is privi|
|00003500| 6c 65 67 65 73 20 61 6c | 6c 20 6f 66 0a 74 68 65 |leges al|l of.the|
|00003510| 20 74 69 6d 65 2e 20 20 | 57 68 69 6c 65 20 74 68 | time.  |While th|
|00003520| 69 73 20 69 73 20 6e 6f | 74 20 74 72 75 65 20 69 |is is no|t true i|
|00003530| 6e 20 4d 75 6c 74 69 63 | 73 2c 20 69 74 20 69 73 |n Multic|s, it is|
|00003540| 20 74 72 75 65 20 69 6e | 20 74 68 65 0a 64 65 66 | true in| the.def|
|00003550| 61 75 6c 74 20 63 6f 6e | 66 69 67 75 72 61 74 69 |ault con|figurati|
|00003560| 6f 6e 20 6f 66 20 61 6c | 6d 6f 73 74 20 65 76 65 |on of al|most eve|
|00003570| 72 79 20 6f 74 68 65 72 | 20 6f 70 65 72 61 74 69 |ry other| operati|
|00003580| 6e 67 20 73 79 73 74 65 | 6d 2e 0a 46 6f 72 74 75 |ng syste|m..Fortu|
|00003590| 6e 61 74 65 6c 79 20 61 | 20 63 6f 6d 70 75 74 65 |nately a| compute|
|000035a0| 72 20 64 6f 65 73 6e 27 | 74 20 6b 6e 6f 77 20 61 |r doesn'|t know a|
|000035b0| 6e 79 74 68 69 6e 67 20 | 61 62 6f 75 74 20 60 60 |nything |about ``|
|000035c0| 70 65 6f 70 6c 65 27 27 | 20 61 6e 64 20 68 65 6e |people''| and hen|
|000035d0| 63 65 0a 69 73 20 70 65 | 72 66 65 63 74 6c 79 20 |ce.is pe|rfectly |
|000035e0| 68 61 70 70 79 20 74 6f | 20 61 6c 6c 6f 77 20 61 |happy to| allow a|
|000035f0| 20 73 69 6e 67 6c 65 20 | 70 65 72 73 6f 6e 20 68 | single |person h|
|00003600| 61 76 65 20 73 65 76 65 | 72 61 6c 20 61 63 63 6f |ave seve|ral acco|
|00003610| 75 6e 74 73 20 77 69 74 | 68 0a 64 69 66 66 65 72 |unts wit|h.differ|
|00003620| 65 6e 74 20 70 61 73 73 | 77 6f 72 64 73 20 61 74 |ent pass|words at|
|00003630| 20 64 69 66 66 65 72 65 | 6e 74 20 70 72 69 76 69 | differe|nt privi|
|00003640| 6c 65 67 65 20 6c 65 76 | 65 6c 73 2e 20 20 54 68 |lege lev|els.  Th|
|00003650| 69 73 20 68 65 6c 70 73 | 20 74 6f 0a 70 72 65 76 |is helps| to.prev|
|00003660| 65 6e 74 20 74 68 65 20 | 61 63 63 69 64 65 6e 74 |ent the |accident|
|00003670| 61 6c 6c 79 20 64 69 73 | 63 6c 6f 73 75 72 65 20 |ally dis|closure |
|00003680| 6f 66 20 61 20 70 72 69 | 76 69 6c 65 67 65 64 20 |of a pri|vileged |
|00003690| 70 61 73 73 77 6f 72 64 | 2e 20 20 49 6e 20 74 68 |password|.  In th|
|000036a0| 65 0a 63 61 73 65 20 77 | 68 65 72 65 20 74 68 65 |e.case w|here the|
|000036b0| 20 70 72 69 76 69 6c 65 | 67 65 64 20 75 73 65 72 | privile|ged user|
|000036c0| 20 68 61 73 20 68 69 73 | 20 75 6e 70 72 69 76 69 | has his| unprivi|
|000036d0| 6c 65 67 65 64 20 61 63 | 63 6f 75 6e 74 20 68 61 |leged ac|count ha|
|000036e0| 76 69 6e 67 0a 74 68 65 | 20 73 61 6d 65 20 70 61 |ving.the| same pa|
|000036f0| 73 73 77 6f 72 64 20 61 | 73 20 68 69 73 20 75 6e |ssword a|s his un|
|00003700| 70 72 69 76 69 6c 65 67 | 65 64 20 61 63 63 6f 75 |privileg|ed accou|
|00003710| 6e 74 20 6f 6e 20 6f 74 | 68 65 72 20 6d 61 63 68 |nt on ot|her mach|
|00003720| 69 6e 65 73 20 69 74 0a | 77 69 6c 6c 20 61 74 20 |ines it.|will at |
|00003730| 6c 65 61 73 74 20 62 65 | 20 74 68 65 20 63 61 73 |least be| the cas|
|00003740| 65 20 74 68 61 74 20 68 | 69 73 20 70 72 69 76 69 |e that h|is privi|
|00003750| 6c 65 67 65 73 20 61 72 | 65 20 6e 6f 74 20 63 6f |leges ar|e not co|
|00003760| 6d 70 72 6f 6d 69 73 65 | 64 0a 77 68 65 6e 20 61 |mpromise|d.when a|
|00003770| 6e 64 20 69 66 20 74 68 | 69 73 20 6f 74 68 65 72 |nd if th|is other|
|00003780| 20 6d 61 63 68 69 6e 65 | 20 69 73 20 63 6f 6d 70 | machine| is comp|
|00003790| 72 6f 6d 69 73 65 64 2e | 0a 0a 54 68 65 20 6f 6e |romised.|..The on|
|000037a0| 65 20 63 61 73 65 20 77 | 68 65 72 65 20 69 74 20 |e case w|here it |
|000037b0| 69 73 20 65 73 70 65 63 | 69 61 6c 6c 79 20 69 6d |is espec|ially im|
|000037c0| 70 6f 72 74 61 6e 74 20 | 74 6f 20 68 61 76 65 20 |portant |to have |
|000037d0| 73 65 70 61 72 61 74 65 | 0a 61 63 63 6f 75 6e 74 |separate|.account|
|000037e0| 73 20 6f 72 20 70 61 73 | 73 77 6f 72 64 73 20 66 |s or pas|swords f|
|000037f0| 6f 72 20 61 20 73 69 6e | 67 6c 65 20 69 6e 64 69 |or a sin|gle indi|
|00003800| 76 69 64 75 61 6c 20 69 | 73 20 66 6f 72 20 73 6f |vidual i|s for so|
|00003810| 6d 65 6f 6e 65 20 77 68 | 6f 0a 74 72 61 76 65 6c |meone wh|o.travel|
|00003820| 73 20 74 6f 20 67 69 76 | 65 20 64 65 6d 6f 73 2e |s to giv|e demos.|
|00003830| 20 20 4f 6e 65 20 63 61 | 6e 20 62 65 20 61 73 73 |  One ca|n be ass|
|00003840| 75 72 65 64 20 74 68 61 | 74 20 68 69 73 20 70 61 |ured tha|t his pa|
|00003850| 73 73 77 6f 72 64 20 77 | 69 6c 6c 20 62 65 0a 6c |ssword w|ill be.l|
|00003860| 6f 73 74 20 77 68 65 6e | 20 68 65 20 69 73 20 67 |ost when| he is g|
|00003870| 69 76 69 6e 67 20 61 20 | 64 65 6d 6f 20 61 6e 64 |iving a |demo and|
|00003880| 20 73 6f 6d 65 74 68 69 | 6e 67 20 62 72 65 61 6b | somethi|ng break|
|00003890| 73 2e 20 20 54 68 65 20 | 6d 6f 73 74 20 63 6f 6d |s.  The |most com|
|000038a0| 6d 6f 6e 0a 66 6f 72 6d | 20 6f 66 20 60 60 62 72 |mon.form| of ``br|
|000038b0| 65 61 6b 61 67 65 27 27 | 20 69 73 20 61 20 70 72 |eakage''| is a pr|
|000038c0| 6f 62 6c 65 6d 20 77 69 | 74 68 20 64 75 70 6c 65 |oblem wi|th duple|
|000038d0| 78 20 6f 66 20 6f 66 20 | 64 65 6c 61 79 2e 20 20 |x of of |delay.  |
|000038e0| 49 74 20 77 6f 75 6c 64 | 20 6e 69 63 65 20 69 66 |It would| nice if|
|000038f0| 0a 61 6c 6c 20 74 68 61 | 74 20 77 61 73 20 6c 6f |.all tha|t was lo|
|00003900| 73 74 20 77 61 73 20 74 | 68 65 20 64 65 6d 6f 20 |st was t|he demo |
|00003910| 70 61 73 73 77 6f 72 64 | 20 61 6e 64 20 66 6f 72 |password| and for|
|00003920| 20 74 68 65 20 64 65 6d | 6f 20 70 61 73 73 77 6f | the dem|o passwo|
|00003930| 72 64 20 74 6f 0a 62 65 | 20 6f 66 20 6e 6f 20 75 |rd to.be| of no u|
|00003940| 73 65 20 74 6f 20 61 6e | 20 61 74 74 61 63 6b 65 |se to an| attacke|
|00003950| 72 2e 0a 0a 0a 5c 73 75 | 62 73 75 62 73 65 63 74 |r....\su|bsubsect|
|00003960| 69 6f 6e 7b 41 75 74 6f | 6d 61 74 65 64 20 43 68 |ion{Auto|mated Ch|
|00003970| 65 63 6b 73 20 66 6f 72 | 20 44 75 6d 62 20 50 61 |ecks for| Dumb Pa|
|00003980| 73 73 77 6f 72 64 73 7d | 0a 0a 41 75 74 6f 6d 61 |sswords}|..Automa|
|00003990| 74 65 64 20 63 68 65 63 | 6b 73 20 66 6f 72 20 64 |ted chec|ks for d|
|000039a0| 75 6d 62 20 70 61 73 73 | 77 6f 72 64 73 20 63 6f |umb pass|words co|
|000039b0| 6d 65 20 69 6e 20 74 68 | 72 65 65 20 76 61 72 69 |me in th|ree vari|
|000039c0| 65 74 69 65 73 2e 20 20 | 54 68 65 0a 66 69 72 73 |eties.  |The.firs|
|000039d0| 74 20 69 73 20 74 6f 20 | 72 6f 75 74 69 6e 65 6c |t is to |routinel|
|000039e0| 79 20 72 75 6e 20 61 20 | 70 61 73 73 77 6f 72 64 |y run a |password|
|000039f0| 20 63 72 61 63 6b 65 72 | 20 61 67 61 69 6e 73 74 | cracker| against|
|00003a00| 20 74 68 65 20 65 6e 63 | 72 79 70 74 65 64 0a 70 | the enc|rypted.p|
|00003a10| 61 73 73 77 6f 72 64 73 | 20 61 6e 64 20 6e 6f 74 |asswords| and not|
|00003a20| 69 63 65 20 77 68 61 74 | 20 69 73 20 63 61 75 67 |ice what| is caug|
|00003a30| 68 74 2e 20 20 57 68 69 | 6c 65 20 74 68 69 73 20 |ht.  Whi|le this |
|00003a40| 69 73 20 61 20 67 6f 6f | 64 20 69 64 65 61 2c 20 |is a goo|d idea, |
|00003a50| 69 74 20 69 73 0a 63 75 | 72 72 65 6e 74 6c 79 20 |it is.cu|rrently |
|00003a60| 75 73 65 64 20 77 69 74 | 68 6f 75 74 20 65 69 74 |used wit|hout eit|
|00003a70| 68 65 72 20 6f 66 20 74 | 68 65 20 6f 74 68 65 72 |her of t|he other|
|00003a80| 20 74 77 6f 20 6d 65 63 | 68 61 6e 69 73 6d 73 20 | two mec|hanisms |
|00003a90| 77 65 20 77 69 6c 6c 0a | 64 65 73 63 72 69 62 65 |we will.|describe|
|00003aa0| 2e 20 20 53 69 6e 63 65 | 20 69 74 20 69 73 20 63 |.  Since| it is c|
|00003ab0| 6f 6d 70 75 74 61 74 69 | 6f 6e 61 6c 6c 79 20 6c |omputati|onally l|
|00003ac0| 65 73 73 20 65 66 66 69 | 63 69 65 6e 74 20 74 68 |ess effi|cient th|
|00003ad0| 61 6e 20 74 68 65 20 6f | 74 68 65 72 73 0a 62 79 |an the o|thers.by|
|00003ae0| 20 61 62 6f 75 74 20 61 | 20 66 61 63 74 6f 72 20 | about a| factor |
|00003af0| 6f 66 20 35 30 2c 30 30 | 30 2c 20 69 74 20 73 68 |of 50,00|0, it sh|
|00003b00| 6f 75 6c 64 20 62 65 20 | 75 73 65 64 20 74 6f 20 |ould be |used to |
|00003b10| 73 75 70 70 6c 65 6d 65 | 6e 74 20 74 68 65 0a 6f |suppleme|nt the.o|
|00003b20| 74 68 65 72 73 20 72 61 | 74 68 65 72 20 74 68 61 |thers ra|ther tha|
|00003b30| 6e 20 62 65 20 75 73 65 | 64 20 65 78 63 6c 75 73 |n be use|d exclus|
|00003b40| 69 76 65 6c 79 2e 20 20 | 41 6d 6f 6e 67 20 69 74 |ively.  |Among it|
|00003b50| 73 20 6d 61 6e 79 20 76 | 69 72 74 75 65 73 20 69 |s many v|irtues i|
|00003b60| 73 0a 74 68 61 74 20 61 | 6e 20 61 75 74 6f 6d 61 |s.that a|n automa|
|00003b70| 74 65 64 20 63 68 65 63 | 6b 69 6e 67 20 73 79 73 |ted chec|king sys|
|00003b80| 74 65 6d 20 74 68 61 74 | 20 72 65 61 64 73 20 74 |tem that| reads t|
|00003b90| 68 65 20 65 6e 63 72 79 | 70 74 65 64 20 70 61 73 |he encry|pted pas|
|00003ba0| 73 77 6f 72 64 73 0a 64 | 6f 65 73 20 6e 6f 74 20 |swords.d|oes not |
|00003bb0| 72 65 71 75 69 72 65 20 | 68 61 76 69 6e 67 20 73 |require |having s|
|00003bc0| 6f 75 72 63 65 20 66 6f | 72 20 74 68 65 20 6f 70 |ource fo|r the op|
|00003bd0| 65 72 61 74 69 6e 67 20 | 73 79 73 74 65 6d 20 6f |erating |system o|
|00003be0| 72 20 6d 61 6b 69 6e 67 | 0a 6d 6f 64 69 66 69 63 |r making|.modific|
|00003bf0| 61 74 69 6f 6e 20 61 6e | 20 73 79 73 74 65 6d 20 |ation an| system |
|00003c00| 6d 6f 64 69 66 69 63 61 | 74 69 6f 6e 73 2e 0a 0a |modifica|tions...|
|00003c10| 54 68 65 20 73 65 63 6f | 6e 64 20 6d 65 74 68 6f |The seco|nd metho|
|00003c20| 64 20 6f 66 20 70 72 65 | 76 65 6e 74 69 6e 67 20 |d of pre|venting |
|00003c30| 64 75 6d 62 20 70 61 73 | 73 77 6f 72 64 20 69 73 |dumb pas|sword is|
|00003c40| 20 74 6f 20 61 6c 74 65 | 72 20 74 68 65 20 70 61 | to alte|r the pa|
|00003c50| 73 73 77 6f 72 64 0a 63 | 68 61 6e 67 69 6e 67 20 |ssword.c|hanging |
|00003c60| 66 61 63 69 6c 69 74 79 | 20 73 6f 20 74 68 61 74 |facility| so that|
|00003c70| 20 69 74 20 64 6f 65 73 | 6e 27 74 20 61 63 63 65 | it does|n't acce|
|00003c80| 70 74 20 64 75 6d 62 20 | 70 61 73 73 77 6f 72 64 |pt dumb |password|
|00003c90| 73 2e 20 20 54 68 69 73 | 20 68 61 73 0a 74 77 6f |s.  This| has.two|
|00003ca0| 20 62 69 67 20 61 64 76 | 61 6e 74 61 67 65 73 20 | big adv|antages |
|00003cb0| 6f 76 65 72 20 74 68 65 | 20 66 69 72 73 74 20 6d |over the| first m|
|00003cc0| 65 74 68 6f 64 2e 20 20 | 54 68 65 20 66 69 72 73 |ethod.  |The firs|
|00003cd0| 74 20 6f 66 20 74 68 65 | 73 65 20 69 73 0a 63 6f |t of the|se is.co|
|00003ce0| 6d 70 75 74 61 74 69 6f | 6e 61 6c 2e 20 20 54 68 |mputatio|nal.  Th|
|00003cf0| 65 20 73 65 63 6f 6e 64 | 20 69 73 20 6d 6f 72 65 |e second| is more|
|00003d00| 20 69 6d 70 6f 72 74 61 | 6e 74 2e 20 20 42 79 20 | importa|nt.  By |
|00003d10| 70 72 65 76 65 6e 74 69 | 6e 67 20 74 68 65 20 75 |preventi|ng the u|
|00003d20| 73 65 72 0a 66 72 6f 6d | 20 73 65 6c 65 63 74 69 |ser.from| selecti|
|00003d30| 6e 67 20 74 68 65 20 70 | 6f 6f 72 20 70 61 73 73 |ng the p|oor pass|
|00003d40| 77 6f 72 64 20 74 6f 20 | 62 65 67 69 6e 20 77 69 |word to |begin wi|
|00003d50| 74 68 2c 20 6f 6e 65 20 | 64 6f 65 73 6e 27 74 20 |th, one |doesn't |
|00003d60| 6e 65 65 64 20 61 6e 0a | 61 64 6d 69 6e 69 73 74 |need an.|administ|
|00003d70| 72 61 74 69 76 65 20 70 | 72 6f 63 65 64 75 72 65 |rative p|rocedure|
|00003d80| 20 74 6f 20 67 65 74 20 | 68 69 6d 20 74 6f 20 63 | to get |him to c|
|00003d90| 68 61 6e 67 65 20 69 74 | 20 6c 61 74 65 72 2e 20 |hange it| later. |
|00003da0| 20 49 74 20 63 61 6e 20 | 61 6c 6c 0a 68 61 70 70 | It can |all.happ|
|00003db0| 65 6e 20 64 69 72 65 63 | 74 6c 79 20 77 69 74 68 |en direc|tly with|
|00003dc0| 20 6e 6f 20 68 75 6d 61 | 6e 20 69 6e 74 65 72 76 | no huma|n interv|
|00003dd0| 65 6e 74 69 6f 6e 20 61 | 6e 64 20 6e 6f 20 61 70 |ention a|nd no ap|
|00003de0| 70 61 72 65 6e 74 0a 61 | 63 63 6f 75 6e 74 61 62 |parent.a|ccountab|
|00003df0| 69 6c 69 74 79 2e 20 20 | 41 73 20 61 20 67 65 6e |ility.  |As a gen|
|00003e00| 65 72 61 6c 20 72 75 6c | 65 2c 20 70 65 6f 70 6c |eral rul|e, peopl|
|00003e10| 65 20 61 72 65 20 6e 6f | 74 20 68 61 70 70 79 20 |e are no|t happy |
|00003e20| 61 62 6f 75 74 0a 70 61 | 73 73 77 6f 72 64 73 20 |about.pa|sswords |
|00003e30| 61 6e 64 20 72 65 61 6c | 6c 79 20 64 6f 6e 27 74 |and real|ly don't|
|00003e40| 20 77 61 6e 74 20 74 6f | 20 68 65 61 72 20 66 72 | want to| hear fr|
|00003e50| 6f 6d 20 20 61 6e 6f 74 | 68 65 72 20 70 65 72 73 |om  anot|her pers|
|00003e60| 6f 6e 20 74 68 61 74 20 | 74 68 65 79 0a 6e 65 65 |on that |they.nee|
|00003e70| 64 20 74 6f 20 20 63 68 | 61 6e 67 65 20 74 68 65 |d to  ch|ange the|
|00003e80| 69 72 20 70 61 73 73 77 | 6f 72 64 20 79 65 74 20 |ir passw|ord yet |
|00003e90| 61 67 61 69 6e 2e 0a 0a | 57 68 69 6c 65 20 74 68 |again...|While th|
|00003ea0| 69 73 20 63 68 61 6e 67 | 65 20 64 6f 65 73 20 72 |is chang|e does r|
|00003eb0| 65 71 75 69 72 65 20 61 | 20 73 79 73 74 65 6d 20 |equire a| system |
|00003ec0| 6d 6f 64 69 66 69 63 61 | 74 69 6f 6e 2c 20 69 74 |modifica|tion, it|
|00003ed0| 20 63 61 6e 20 6f 66 74 | 65 6e 20 62 65 0a 64 6f | can oft|en be.do|
|00003ee0| 6e 65 20 77 69 74 68 6f | 75 74 20 73 6f 75 72 63 |ne witho|ut sourc|
|00003ef0| 65 20 63 6f 64 65 20 62 | 79 20 77 72 69 74 69 6e |e code b|y writin|
|00003f00| 67 20 61 20 70 72 65 2d | 70 72 6f 63 65 73 73 6f |g a pre-|processo|
|00003f10| 72 20 74 6f 20 73 63 72 | 65 65 6e 20 74 68 65 0a |r to scr|een the.|
|00003f20| 70 61 73 73 77 6f 72 64 | 73 20 62 65 66 6f 72 65 |password|s before|
|00003f30| 20 74 68 65 20 6e 65 77 | 20 70 61 73 73 77 6f 72 | the new| passwor|
|00003f40| 64 20 69 73 20 70 61 73 | 73 65 64 20 74 6f 20 74 |d is pas|sed to t|
|00003f50| 68 65 20 65 78 69 73 74 | 69 6e 67 20 75 74 69 6c |he exist|ing util|
|00003f60| 69 74 69 65 73 2e 0a 54 | 68 65 20 77 65 61 6b 6e |ities..T|he weakn|
|00003f70| 65 73 73 20 69 6e 20 74 | 68 69 73 20 61 70 70 72 |ess in t|his appr|
|00003f80| 6f 61 63 68 20 6c 69 65 | 73 20 77 69 74 68 20 20 |oach lie|s with  |
|00003f90| 74 68 65 20 75 73 65 72 | 73 20 77 68 6f 20 61 72 |the user|s who ar|
|00003fa0| 65 20 6e 6f 74 0a 72 65 | 71 75 69 72 65 64 20 74 |e not.re|quired t|
|00003fb0| 6f 20 75 73 65 20 74 68 | 65 20 6e 65 77 20 73 74 |o use th|e new st|
|00003fc0| 79 6c 65 20 6f 66 20 70 | 61 73 73 77 6f 72 64 20 |yle of p|assword |
|00003fd0| 66 61 63 69 6c 69 74 79 | 2e 20 20 41 73 20 61 20 |facility|.  As a |
|00003fe0| 72 65 73 75 6c 74 2c 20 | 6f 6e 65 0a 66 69 6e 64 |result, |one.find|
|00003ff0| 73 20 74 68 61 74 20 66 | 61 63 69 6c 69 74 69 65 |s that f|acilitie|
|00004000| 73 20 74 68 61 74 20 75 | 73 65 20 6f 6e 6c 79 20 |s that u|se only |
|00004010| 74 68 69 73 20 6d 65 74 | 68 6f 64 20 68 61 76 65 |this met|hod have|
|00004020| 20 67 6f 6f 64 20 70 61 | 73 73 77 6f 72 64 73 0a | good pa|sswords.|
|00004030| 66 6f 72 20 65 76 65 72 | 79 6f 6e 65 20 65 78 63 |for ever|yone exc|
|00004040| 65 70 74 20 74 68 65 20 | 73 79 73 74 65 6d 20 73 |ept the |system s|
|00004050| 74 61 66 66 20 61 6e 64 | 20 6e 65 77 20 75 73 65 |taff and| new use|
|00004060| 72 73 20 77 68 6f 20 68 | 61 76 65 20 68 61 64 20 |rs who h|ave had |
|00004070| 74 68 65 69 72 0a 69 6e | 69 74 69 61 6c 20 70 61 |their.in|itial pa|
|00004080| 73 73 77 6f 72 64 73 20 | 73 65 74 20 62 79 20 74 |sswords |set by t|
|00004090| 68 65 20 73 79 73 74 65 | 6d 20 73 74 61 66 66 2e |he syste|m staff.|
|000040a0| 0a 0a 54 68 65 20 74 68 | 69 72 64 20 6d 65 74 68 |..The th|ird meth|
|000040b0| 6f 64 20 69 73 20 64 65 | 73 69 67 6e 65 64 20 70 |od is de|signed p|
|000040c0| 72 69 6d 61 72 69 6c 79 | 20 74 6f 20 63 61 74 63 |rimarily| to catc|
|000040d0| 68 20 74 68 65 20 62 61 | 64 20 70 61 73 73 77 6f |h the ba|d passwo|
|000040e0| 72 64 73 0a 74 68 61 74 | 20 61 72 65 20 65 6e 74 |rds.that| are ent|
|000040f0| 65 72 65 64 20 69 6e 20 | 64 65 73 70 69 74 65 20 |ered in |despite |
|00004100| 74 68 65 20 75 73 65 20 | 6f 66 20 74 68 65 20 73 |the use |of the s|
|00004110| 65 63 6f 6e 64 20 6d 65 | 74 68 6f 64 2e 20 20 4f |econd me|thod.  O|
|00004120| 6e 63 65 20 63 6f 75 6c | 64 0a 63 68 65 63 6b 20 |nce coul|d.check |
|00004130| 74 68 65 20 60 60 64 75 | 6d 62 6e 65 73 73 27 27 |the ``du|mbness''|
|00004140| 20 6f 66 20 61 20 70 61 | 73 73 77 6f 72 64 20 77 | of a pa|ssword w|
|00004150| 69 74 68 20 65 61 63 68 | 20 61 74 74 65 6d 70 74 |ith each| attempt|
|00004160| 65 64 20 75 73 65 2e 20 | 20 57 68 69 6c 65 0a 74 |ed use. | While.t|
|00004170| 68 69 73 20 69 73 20 63 | 6f 6d 70 75 74 61 74 69 |his is c|omputati|
|00004180| 6f 6e 61 6c 6c 79 20 6d | 6f 72 65 20 65 78 70 65 |onally m|ore expe|
|00004190| 6e 73 69 76 65 20 74 68 | 61 6e 20 74 68 65 20 73 |nsive th|an the s|
|000041a0| 65 63 6f 6e 64 20 6d 65 | 74 68 6f 64 2c 20 69 74 |econd me|thod, it|
|000041b0| 0a 67 65 6e 65 72 61 6c | 6c 79 20 63 61 74 63 68 |.general|ly catch|
|000041c0| 65 73 20 65 76 65 72 79 | 6f 6e 65 2e 20 20 45 76 |es every|one.  Ev|
|000041d0| 65 6e 20 74 68 65 20 73 | 79 73 74 65 6d 20 70 72 |en the s|ystem pr|
|000041e0| 6f 67 72 61 6d 6d 65 72 | 73 20 74 65 6e 64 20 74 |ogrammer|s tend t|
|000041f0| 6f 20 75 73 65 0a 74 68 | 65 20 73 74 61 6e 64 61 |o use.th|e standa|
|00004200| 72 64 20 6c 6f 67 69 6e | 20 75 74 69 6c 69 74 79 |rd login| utility|
|00004210| 2e 20 20 49 74 20 68 61 | 73 20 74 68 65 20 6e 69 |.  It ha|s the ni|
|00004220| 63 65 20 66 65 61 74 75 | 72 65 20 6f 66 20 6c 6f |ce featu|re of lo|
|00004230| 63 6b 69 6e 67 20 6f 75 | 74 0a 61 6e 79 6f 6e 65 |cking ou|t.anyone|
|00004240| 20 74 68 61 74 20 66 69 | 6e 64 73 20 61 20 77 61 | that fi|nds a wa|
|00004250| 79 20 74 6f 20 63 69 72 | 63 75 6d 76 65 6e 74 20 |y to cir|cumvent |
|00004260| 74 68 65 20 73 65 63 6f | 6e 64 20 6d 65 74 68 6f |the seco|nd metho|
|00004270| 64 2e 20 20 54 68 69 73 | 0a 67 65 6e 65 72 61 6c |d.  This|.general|
|00004280| 6c 79 20 72 65 71 75 69 | 72 65 73 20 61 20 73 6d |ly requi|res a sm|
|00004290| 61 6c 6c 20 61 6d 6f 75 | 6e 74 20 6f 66 20 73 79 |all amou|nt of sy|
|000042a0| 73 74 65 6d 20 73 6f 75 | 72 63 65 20 61 6e 64 20 |stem sou|rce and |
|000042b0| 72 69 73 6b 73 20 63 61 | 75 73 69 6e 67 0a 65 6d |risks ca|using.em|
|000042c0| 62 61 72 72 61 73 73 6d | 65 6e 74 20 74 6f 20 60 |barrassm|ent to `|
|000042d0| 60 74 6f 6f 20 63 6c 65 | 76 65 72 27 27 20 73 79 |`too cle|ver'' sy|
|000042e0| 73 74 65 6d 20 73 74 61 | 66 66 20 6d 65 6d 62 65 |stem sta|ff membe|
|000042f0| 72 73 2e 0a 20 0a 49 6e | 20 74 65 72 6d 73 20 6f |rs.. .In| terms o|
|00004300| 66 20 64 75 6d 62 20 70 | 61 73 73 77 6f 72 64 73 |f dumb p|asswords|
|00004310| 2c 20 74 68 65 72 65 20 | 61 72 65 20 61 20 6e 75 |, there |are a nu|
|00004320| 6d 62 65 72 20 6f 66 20 | 60 60 61 74 74 61 63 6b |mber of |``attack|
|00004330| 20 6c 69 73 74 73 27 27 | 2e 0a 41 6e 20 61 74 74 | lists''|..An att|
|00004340| 61 63 6b 20 6c 69 73 74 | 20 69 73 20 61 20 6c 69 |ack list| is a li|
|00004350| 73 74 20 6f 66 20 63 6f | 6d 6d 6f 6e 20 70 61 73 |st of co|mmon pas|
|00004360| 73 77 6f 72 64 73 20 74 | 68 61 74 20 61 6e 20 61 |swords t|hat an a|
|00004370| 74 74 61 63 6b 65 72 20 | 63 6f 75 6c 64 0a 75 73 |ttacker |could.us|
|00004380| 65 20 74 6f 20 74 72 79 | 20 74 6f 20 6c 6f 67 69 |e to try| to logi|
|00004390| 6e 20 77 69 74 68 2e 20 | 20 53 65 76 65 72 61 6c |n with. | Several|
|000043a0| 20 6f 66 20 74 68 65 73 | 65 20 68 61 76 65 20 62 | of thes|e have b|
|000043b0| 65 65 6e 20 70 75 62 6c | 69 73 68 65 64 20 61 6e |een publ|ished an|
|000043c0| 64 0a 6d 6f 72 65 20 61 | 72 65 20 63 6f 6e 73 74 |d.more a|re const|
|000043d0| 61 6e 74 6c 79 20 62 65 | 69 6e 67 20 66 6f 72 6d |antly be|ing form|
|000043e0| 65 64 2e 20 20 54 68 65 | 73 65 20 6c 69 73 74 73 |ed.  The|se lists|
|000043f0| 20 61 72 65 20 75 73 65 | 64 20 66 6f 72 20 74 68 | are use|d for th|
|00004400| 65 0a 61 75 74 6f 6d 61 | 74 65 64 20 70 61 73 73 |e.automa|ted pass|
|00004410| 77 6f 72 64 20 67 75 65 | 73 73 65 72 20 61 6e 64 |word gue|sser and|
|00004420| 20 74 68 65 79 20 6d 61 | 79 20 61 6c 73 6f 20 62 | they ma|y also b|
|00004430| 65 20 75 73 65 64 20 64 | 69 72 65 63 74 6c 79 20 |e used d|irectly |
|00004440| 69 6e 20 74 68 65 0a 73 | 65 63 6f 6e 64 20 61 6e |in the.s|econd an|
|00004450| 64 20 74 68 69 72 64 20 | 6d 65 74 68 6f 64 20 64 |d third |method d|
|00004460| 65 73 63 72 69 62 65 64 | 20 61 62 6f 76 65 2e 20 |escribed| above. |
|00004470| 20 57 69 74 68 20 74 68 | 65 20 73 65 63 6f 6e 64 | With th|e second|
|00004480| 20 61 6e 64 20 74 68 69 | 72 64 0a 6d 65 74 68 6f | and thi|rd.metho|
|00004490| 64 20 6f 6e 65 20 6d 61 | 79 20 61 6c 73 6f 20 75 |d one ma|y also u|
|000044a0| 73 65 20 63 72 69 74 65 | 72 69 61 20 69 6e 63 6c |se crite|ria incl|
|000044b0| 75 64 69 6e 67 20 6d 69 | 6e 69 6d 75 6d 20 6c 65 |uding mi|nimum le|
|000044c0| 6e 67 74 68 2c 20 75 73 | 65 20 6f 66 0a 6e 6f 6e |ngth, us|e of.non|
|000044d0| 2d 61 6c 70 68 61 62 65 | 74 69 63 20 63 68 61 72 |-alphabe|tic char|
|000044e0| 61 63 74 65 72 73 2c 20 | 65 74 63 2e 20 20 46 69 |acters, |etc.  Fi|
|000044f0| 6e 61 6c 6c 79 2c 20 69 | 6e 66 6f 72 6d 61 74 69 |nally, i|nformati|
|00004500| 6f 6e 20 61 62 6f 75 74 | 20 74 68 65 0a 69 6e 64 |on about| the.ind|
|00004510| 69 76 69 64 75 61 6c 20 | 75 73 65 72 20 66 6f 75 |ividual |user fou|
|00004520| 6e 64 20 69 6e 20 73 74 | 61 6e 64 61 72 64 20 73 |nd in st|andard s|
|00004530| 79 73 74 65 6d 20 66 69 | 6c 65 73 20 63 61 6e 20 |ystem fi|les can |
|00004540| 62 65 20 73 63 61 6e 6e | 65 64 20 74 6f 20 73 65 |be scann|ed to se|
|00004550| 65 0a 69 66 20 74 68 65 | 20 75 73 65 72 20 68 61 |e.if the| user ha|
|00004560| 73 20 69 6e 63 6f 72 70 | 6f 72 61 74 65 64 20 74 |s incorp|orated t|
|00004570| 68 69 73 20 69 6e 66 6f | 72 6d 61 74 69 6f 6e 20 |his info|rmation |
|00004580| 69 6e 74 6f 20 68 69 73 | 20 70 61 73 73 77 6f 72 |into his| passwor|
|00004590| 64 2e 0a 0a 0a 5c 73 75 | 62 73 75 62 73 65 63 74 |d....\su|bsubsect|
|000045a0| 69 6f 6e 7b 4d 61 63 68 | 69 6e 65 20 47 65 6e 65 |ion{Mach|ine Gene|
|000045b0| 72 61 74 65 64 20 50 61 | 73 73 77 6f 72 64 73 7d |rated Pa|sswords}|
|000045c0| 0a 0a 4d 6f 73 74 20 75 | 73 65 72 73 20 68 61 74 |..Most u|sers hat|
|000045d0| 65 20 6d 61 63 68 69 6e | 65 20 67 65 6e 65 72 61 |e machin|e genera|
|000045e0| 74 65 64 20 70 61 73 73 | 77 6f 72 64 73 2e 20 20 |ted pass|words.  |
|000045f0| 4f 66 74 65 6e 20 74 68 | 65 79 20 61 72 65 0a 75 |Often th|ey are.u|
|00004600| 6e 72 65 6d 65 6d 62 65 | 72 61 62 6c 65 20 61 6e |nremembe|rable an|
|00004610| 64 20 61 63 63 6f 6d 70 | 61 6e 69 65 64 20 62 79 |d accomp|anied by|
|00004620| 20 61 20 77 61 72 6e 69 | 6e 67 20 74 6f 20 60 60 | a warni|ng to ``|
|00004630| 7b 5c 65 6d 20 4e 65 76 | 65 72 5c 2f 7d 20 77 72 |{\em Nev|er\/} wr|
|00004640| 69 74 65 0a 74 68 65 6d | 20 64 6f 77 6e 27 27 20 |ite.them| down'' |
|00004650| 77 68 69 63 68 20 69 73 | 20 61 20 66 72 75 73 74 |which is| a frust|
|00004660| 72 61 74 69 6e 67 20 63 | 6f 6d 62 69 6e 61 74 69 |rating c|ombinati|
|00004670| 6f 6e 2e 20 20 28 57 65 | 20 77 69 6c 6c 20 64 69 |on.  (We| will di|
|00004680| 73 63 75 73 73 20 74 68 | 65 0a 74 68 65 20 77 72 |scuss th|e.the wr|
|00004690| 69 74 69 6e 67 20 64 6f | 77 6e 20 6f 66 20 70 61 |iting do|wn of pa|
|000046a0| 73 73 77 6f 72 64 73 20 | 6c 61 74 65 72 2e 29 20 |sswords |later.) |
|000046b0| 20 4d 61 63 68 69 6e 65 | 20 67 65 6e 65 72 61 74 | Machine| generat|
|000046c0| 65 64 20 70 61 73 73 77 | 6f 72 64 73 0a 63 6f 6d |ed passw|ords.com|
|000046d0| 65 20 69 6e 20 66 6f 75 | 72 20 62 61 73 69 63 20 |e in fou|r basic |
|000046e0| 74 79 70 65 73 0a 0a 5c | 62 65 67 69 6e 7b 64 65 |types..\|begin{de|
|000046f0| 73 63 72 69 70 74 69 6f | 6e 7d 09 0a 0a 5c 69 74 |scriptio|n}...\it|
|00004700| 65 6d 5b 47 69 62 62 65 | 72 69 73 68 2e 5d 20 20 |em[Gibbe|rish.]  |
|00004710| 54 68 69 73 20 69 73 20 | 74 68 65 20 6d 6f 73 74 |This is |the most|
|00004720| 20 6f 62 76 69 6f 75 73 | 20 61 70 70 72 6f 61 63 | obvious| approac|
|00004730| 68 20 74 6f 20 72 61 6e | 64 6f 6d 6e 65 73 73 2e |h to ran|domness.|
|00004740| 0a 49 6e 64 65 70 65 6e | 64 65 6e 74 6c 79 20 73 |.Indepen|dently s|
|00004750| 65 6c 65 63 74 65 64 20 | 73 65 76 65 72 61 6c 20 |elected |several |
|00004760| 63 68 61 72 61 63 74 65 | 72 73 20 66 72 6f 6d 20 |characte|rs from |
|00004770| 20 74 68 65 20 73 65 74 | 20 6f 66 20 61 6c 6c 0a | the set| of all.|
|00004780| 70 72 69 6e 74 61 62 6c | 65 20 63 68 61 72 61 63 |printabl|e charac|
|00004790| 74 65 72 73 2e 20 20 46 | 6f 72 20 61 20 73 69 78 |ters.  F|or a six|
|000047a0| 20 63 68 61 72 61 63 74 | 65 72 20 70 61 73 73 77 | charact|er passw|
|000047b0| 6f 72 64 2c 20 74 68 69 | 73 20 67 69 76 65 73 20 |ord, thi|s gives |
|000047c0| 61 62 6f 75 74 0a 34 30 | 20 62 69 74 73 20 6f 66 |about.40| bits of|
|000047d0| 20 72 61 6e 64 6f 6d 6e | 65 73 73 2e 20 49 74 20 | randomn|ess. It |
|000047e0| 69 73 20 76 65 72 79 20 | 68 61 72 64 20 74 6f 20 |is very |hard to |
|000047f0| 67 75 65 73 73 20 61 6e | 64 20 70 65 72 68 61 70 |guess an|d perhap|
|00004800| 73 20 65 76 65 6e 0a 68 | 61 72 64 65 72 20 74 6f |s even.h|arder to|
|00004810| 20 72 65 6d 65 6d 62 65 | 72 2e 20 20 0a 0a 4f 66 | remembe|r.  ..Of|
|00004820| 74 65 6e 20 61 20 6c 69 | 74 74 6c 65 20 62 69 74 |ten a li|ttle bit|
|00004830| 20 6f 66 20 70 6f 73 74 | 20 70 72 6f 63 65 73 73 | of post| process|
|00004840| 69 6e 67 20 69 73 20 64 | 6f 6e 65 20 6f 6e 20 74 |ing is d|one on t|
|00004850| 68 65 73 65 20 70 61 73 | 73 77 6f 72 64 73 20 61 |hese pas|swords a|
|00004860| 73 0a 77 65 6c 6c 20 61 | 73 20 6f 6e 20 74 68 65 |s.well a|s on the|
|00004870| 20 72 61 6e 64 6f 6d 20 | 73 79 6c 6c 61 62 6c 65 | random |syllable|
|00004880| 73 20 64 69 73 63 75 73 | 73 65 64 20 62 65 6c 6f |s discus|sed belo|
|00004890| 77 2e 20 20 54 68 69 73 | 20 70 6f 73 74 20 70 72 |w.  This| post pr|
|000048a0| 6f 63 65 73 73 69 6e 67 | 0a 72 65 6d 6f 76 65 73 |ocessing|.removes|
|000048b0| 20 70 61 73 73 77 6f 72 | 64 73 20 74 68 61 74 20 | passwor|ds that |
|000048c0| 6d 69 67 68 74 20 70 72 | 6f 76 65 20 6f 66 66 65 |might pr|ove offe|
|000048d0| 6e 73 69 76 65 20 74 6f | 20 74 68 65 20 75 73 65 |nsive to| the use|
|000048e0| 72 2e 20 20 57 68 65 6e | 20 61 0a 70 6f 74 65 6e |r.  When| a.poten|
|000048f0| 74 69 61 6c 6c 79 20 6f | 66 66 65 6e 73 69 76 65 |tially o|ffensive|
|00004900| 20 70 61 73 73 77 6f 72 | 64 20 69 73 20 67 65 6e | passwor|d is gen|
|00004910| 65 72 61 74 65 64 2c 20 | 74 68 65 20 70 72 6f 67 |erated, |the prog|
|00004920| 72 61 6d 20 73 69 6d 70 | 6c 79 20 74 72 69 65 73 |ram simp|ly tries|
|00004930| 0a 61 67 61 69 6e 2e 20 | 20 54 68 65 20 75 73 65 |.again. | The use|
|00004940| 72 20 6f 66 74 65 6e 20 | 62 65 68 61 76 65 73 20 |r often |behaves |
|00004950| 74 68 65 20 73 61 6d 65 | 20 77 61 79 20 61 6e 64 |the same| way and|
|00004960| 20 72 75 6e 73 20 74 68 | 65 20 72 61 6e 64 6f 6d | runs th|e random|
|00004970| 69 7a 65 72 0a 6f 76 65 | 72 20 61 6e 64 20 6f 76 |izer.ove|r and ov|
|00004980| 65 72 20 61 67 61 69 6e | 20 75 6e 74 69 6c 20 61 |er again| until a|
|00004990| 20 70 61 73 73 77 6f 72 | 64 20 74 68 61 74 20 73 | passwor|d that s|
|000049a0| 65 65 6d 73 20 6c 65 73 | 73 20 72 61 6e 64 6f 6d |eems les|s random|
|000049b0| 20 61 6e 64 20 6d 6f 72 | 65 0a 6d 65 6d 6f 72 61 | and mor|e.memora|
|000049c0| 62 6c 65 20 74 6f 20 68 | 69 6d 20 69 73 20 73 65 |ble to h|im is se|
|000049d0| 6c 65 63 74 65 64 2e 20 | 20 49 6e 20 70 72 69 6e |lected. | In prin|
|000049e0| 63 69 70 6c 65 2c 20 74 | 68 65 20 63 6c 65 76 65 |ciple, t|he cleve|
|000049f0| 72 20 75 73 65 72 20 63 | 6f 75 6c 64 0a 77 72 69 |r user c|ould.wri|
|00004a00| 74 65 20 61 20 70 72 6f | 67 72 61 6d 20 74 68 61 |te a pro|gram tha|
|00004a10| 74 20 6b 65 70 74 20 72 | 65 71 75 65 73 74 69 6e |t kept r|equestin|
|00004a20| 67 20 6e 65 77 20 72 61 | 6e 64 6f 6d 20 70 61 73 |g new ra|ndom pas|
|00004a30| 73 77 6f 72 64 73 20 75 | 6e 74 69 6c 20 61 6e 0a |swords u|ntil an.|
|00004a40| 45 6e 67 6c 69 73 68 20 | 77 6f 72 64 20 77 61 73 |English |word was|
|00004a50| 20 63 68 6f 73 65 6e 20 | 66 6f 72 20 68 69 6d 3b | chosen |for him;|
|00004a60| 20 74 68 69 73 20 77 6f | 75 6c 64 20 74 61 6b 65 | this wo|uld take|
|00004a70| 20 6d 75 63 68 20 74 6f | 6f 20 6c 6f 6e 67 20 74 | much to|o long t|
|00004a80| 6f 20 62 65 0a 70 72 61 | 63 74 69 63 61 6c 2e 20 |o be.pra|ctical. |
|00004a90| 0a 0a 5c 69 74 65 6d 5b | 4e 75 6d 62 65 72 73 2e |..\item[|Numbers.|
|00004aa0| 5d 20 20 4e 75 6d 62 65 | 72 73 20 61 72 65 20 61 |]  Numbe|rs are a|
|00004ab0| 20 6c 6f 74 20 6c 69 6b | 65 20 6c 65 74 74 65 72 | lot lik|e letter|
|00004ac0| 73 2e 20 20 50 65 6f 70 | 6c 65 20 64 6f 6e 27 74 |s.  Peop|le don't|
|00004ad0| 20 74 72 79 20 74 6f 0a | 70 72 6f 6e 6f 75 6e 63 | try to.|pronounc|
|00004ae0| 65 20 74 68 65 6d 20 61 | 6e 64 20 74 68 65 72 65 |e them a|nd there|
|00004af0| 20 61 72 65 20 76 65 72 | 79 20 66 65 77 20 6e 75 | are ver|y few nu|
|00004b00| 6d 62 65 72 73 20 74 68 | 61 74 20 61 72 65 20 60 |mbers th|at are `|
|00004b10| 60 6f 66 66 65 6e 73 69 | 76 65 27 27 0a 70 65 72 |`offensi|ve''.per|
|00004b20| 20 73 65 2e 20 20 41 6e | 20 65 69 67 68 74 20 64 | se.  An| eight d|
|00004b30| 69 67 69 74 20 72 61 6e | 64 6f 6d 20 6e 75 6d 62 |igit ran|dom numb|
|00004b40| 65 72 20 68 61 73 20 61 | 62 6f 75 74 20 32 36 20 |er has a|bout 26 |
|00004b50| 62 69 74 73 20 6f 66 20 | 72 61 6e 64 6f 6d 6e 65 |bits of |randomne|
|00004b60| 73 73 0a 69 6e 20 69 74 | 20 61 6e 64 20 69 73 20 |ss.in it| and is |
|00004b70| 6f 66 20 63 6f 6d 70 61 | 72 61 62 6c 65 20 73 74 |of compa|rable st|
|00004b80| 72 65 6e 67 74 68 20 74 | 6f 20 61 20 34 20 63 68 |rength t|o a 4 ch|
|00004b90| 61 72 61 63 74 65 72 20 | 72 61 6e 64 6f 6d 20 70 |aracter |random p|
|00004ba0| 61 73 73 77 6f 72 64 0a | 63 68 6f 73 65 6e 20 66 |assword.|chosen f|
|00004bb0| 72 6f 6d 20 74 68 65 20 | 75 6e 72 65 73 74 72 69 |rom the |unrestri|
|00004bc0| 63 74 65 64 20 73 65 74 | 20 6f 66 20 70 72 69 6e |cted set| of prin|
|00004bd0| 74 61 62 6c 65 20 63 68 | 61 72 61 63 74 65 72 73 |table ch|aracters|
|00004be0| 2e 20 20 28 54 68 65 20 | 61 6d 6f 75 6e 74 20 6f |.  (The |amount o|
|00004bf0| 66 0a 72 61 6e 64 6f 6d | 6e 65 73 73 20 69 6e 20 |f.random|ness in |
|00004c00| 61 20 70 61 73 73 77 6f | 72 64 20 69 73 20 74 68 |a passwo|rd is th|
|00004c10| 65 20 6c 6f 67 20 28 62 | 61 73 65 20 32 29 20 6f |e log (b|ase 2) o|
|00004c20| 66 20 74 68 65 20 6e 75 | 6d 62 65 72 20 6f 66 20 |f the nu|mber of |
|00004c30| 70 6f 73 73 69 62 6c 65 | 0a 70 61 73 73 77 6f 72 |possible|.passwor|
|00004c40| 64 73 20 69 66 20 74 68 | 65 79 20 77 65 72 65 20 |ds if th|ey were |
|00004c50| 61 6c 6c 20 65 71 75 61 | 6c 6c 79 20 6c 69 6b 65 |all equa|lly like|
|00004c60| 6c 79 20 74 6f 20 6f 63 | 63 75 72 2e 29 0a 0a 45 |ly to oc|cur.)..E|
|00004c70| 69 67 68 74 20 64 69 67 | 69 74 20 6e 75 6d 62 65 |ight dig|it numbe|
|00004c80| 72 73 20 61 72 65 20 68 | 61 72 64 20 74 6f 20 72 |rs are h|ard to r|
|00004c90| 65 6d 65 6d 62 65 72 2e | 20 20 46 6f 72 74 75 6e |emember.|  Fortun|
|00004ca0| 61 74 65 6c 79 20 60 60 | 63 68 75 6e 6b 69 6e 67 |ately ``|chunking|
|00004cb0| 27 27 0a 74 68 65 6d 20 | 69 6e 74 6f 20 67 72 6f |''.them |into gro|
|00004cc0| 75 70 73 20 28 61 73 20 | 31 38 34 2d 2d 2d 32 35 |ups (as |184---25|
|00004cd0| 2d 2d 2d 37 35 34 36 29 | 20 6d 61 6b 65 73 20 74 |---7546)| makes t|
|00004ce0| 68 69 73 20 6c 65 73 73 | 20 64 69 66 66 69 63 75 |his less| difficu|
|00004cf0| 6c 74 20 74 68 61 6e 0a | 69 74 20 77 6f 75 6c 64 |lt than.|it would|
|00004d00| 20 6f 74 68 65 72 77 69 | 73 65 20 62 65 2e 0a 0a | otherwi|se be...|
|00004d10| 5c 69 74 65 6d 5b 53 79 | 6c 6c 61 62 6c 65 73 2e |\item[Sy|llables.|
|00004d20| 5d 20 20 54 68 69 73 20 | 69 73 20 62 79 20 66 61 |]  This |is by fa|
|00004d30| 72 20 74 68 65 20 6d 6f | 73 74 20 63 6f 6d 6d 6f |r the mo|st commo|
|00004d40| 6e 20 6d 65 74 68 6f 64 | 20 63 75 72 72 65 6e 74 |n method| current|
|00004d50| 6c 79 0a 75 73 65 64 2e | 20 20 54 68 65 20 69 64 |ly.used.|  The id|
|00004d60| 65 61 20 69 73 20 74 6f | 20 6d 61 6b 65 20 6e 6f |ea is to| make no|
|00004d70| 6e 2d 77 6f 72 64 73 20 | 74 68 61 74 20 61 72 65 |n-words |that are|
|00004d80| 20 65 61 73 79 20 74 6f | 20 72 65 6d 65 6d 62 65 | easy to| remembe|
|00004d90| 72 20 62 65 63 61 75 73 | 65 0a 74 68 65 79 20 73 |r becaus|e.they s|
|00004da0| 6f 75 6e 64 20 6c 69 6b | 65 20 77 6f 72 64 73 2e |ound lik|e words.|
|00004db0| 20 20 41 20 74 68 72 65 | 65 20 73 79 6c 6c 61 62 |  A thre|e syllab|
|00004dc0| 6c 65 2c 20 65 69 67 68 | 74 20 6c 65 74 74 65 72 |le, eigh|t letter|
|00004dd0| 20 6e 6f 6e 2d 77 6f 72 | 64 20 6f 66 74 65 6e 0a | non-wor|d often.|
|00004de0| 68 61 73 20 61 62 6f 75 | 74 20 32 34 20 62 69 74 |has abou|t 24 bit|
|00004df0| 73 20 6f 66 20 72 61 6e | 64 6f 6d 6e 65 73 73 20 |s of ran|domness |
|00004e00| 69 6e 20 69 74 20 6d 61 | 6b 69 6e 67 20 69 74 20 |in it ma|king it |
|00004e10| 6e 6f 74 20 71 75 69 74 | 65 20 61 73 20 73 74 72 |not quit|e as str|
|00004e20| 6f 6e 67 20 61 73 20 61 | 6e 20 38 0a 62 69 74 20 |ong as a|n 8.bit |
|00004e30| 6e 75 6d 62 65 72 20 62 | 75 74 20 68 6f 70 65 66 |number b|ut hopef|
|00004e40| 75 6c 6c 79 20 61 20 6c | 69 74 74 6c 65 20 62 69 |ully a l|ittle bi|
|00004e50| 74 20 6d 6f 72 65 20 6d | 65 6d 6f 72 61 62 6c 65 |t more m|emorable|
|00004e60| 2e 20 0a 0a 54 68 65 20 | 70 72 69 6e 63 69 70 6c |. ..The |principl|
|00004e70| 65 20 68 65 72 65 20 69 | 73 20 67 6f 6f 64 2e 20 |e here i|s good. |
|00004e80| 20 49 6e 20 66 61 63 74 | 2c 20 74 68 69 73 20 70 | In fact|, this p|
|00004e90| 73 65 75 64 6f 2d 77 6f | 72 64 20 69 64 65 61 20 |seudo-wo|rd idea |
|00004ea0| 73 68 6f 75 6c 64 20 77 | 6f 72 6b 0a 76 65 72 79 |should w|ork.very|
|00004eb0| 20 77 65 6c 6c 2e 20 20 | 49 6e 20 70 72 61 63 74 | well.  |In pract|
|00004ec0| 69 63 65 20 69 74 20 66 | 61 69 6c 73 20 6d 69 73 |ice it f|ails mis|
|00004ed0| 65 72 61 62 6c 79 20 62 | 65 63 61 75 73 65 20 74 |erably b|ecause t|
|00004ee0| 68 65 20 73 74 61 6e 64 | 61 72 64 0a 70 72 6f 67 |he stand|ard.prog|
|00004ef0| 72 61 6d 73 20 66 6f 72 | 20 67 65 6e 65 72 61 74 |rams for| generat|
|00004f00| 69 6e 67 20 74 68 65 73 | 65 20 70 73 65 75 64 6f |ing thes|e pseudo|
|00004f10| 2d 73 79 6c 6c 61 62 6c | 65 73 20 61 72 65 20 76 |-syllabl|es are v|
|00004f20| 65 72 79 20 70 6f 6f 72 | 2e 0a 45 76 65 6e 74 75 |ery poor|..Eventu|
|00004f30| 61 6c 6c 79 20 77 65 20 | 6d 61 79 20 66 69 6e 64 |ally we |may find|
|00004f40| 20 61 20 67 6f 6f 64 20 | 69 6d 70 6c 65 6d 65 6e | a good |implemen|
|00004f50| 74 61 74 69 6f 6e 20 6f | 66 20 74 68 69 73 20 61 |tation o|f this a|
|00004f60| 6e 64 20 73 65 65 20 61 | 20 68 69 67 68 65 72 0a |nd see a| higher.|
|00004f70| 6c 65 76 65 6c 20 6f 66 | 20 75 73 65 72 20 61 63 |level of| user ac|
|00004f80| 63 65 70 74 61 6e 63 65 | 2e 0a 0a 5c 69 74 65 6d |ceptance|...\item|
|00004f90| 5b 50 61 73 73 20 50 68 | 72 61 73 65 73 2e 5d 20 |[Pass Ph|rases.] |
|00004fa0| 20 50 61 73 73 20 70 68 | 72 61 73 65 73 20 61 72 | Pass ph|rases ar|
|00004fb0| 65 20 74 68 65 20 6c 65 | 61 73 74 20 63 6f 6d 6d |e the le|ast comm|
|00004fc0| 6f 6e 20 77 61 79 20 74 | 6f 0a 69 6d 70 6c 65 6d |on way t|o.implem|
|00004fd0| 65 6e 74 20 6d 61 63 68 | 69 6e 65 20 67 65 6e 65 |ent mach|ine gene|
|00004fe0| 72 61 74 65 64 20 70 61 | 73 73 77 6f 72 64 73 2e |rated pa|sswords.|
|00004ff0| 20 20 54 68 65 20 69 64 | 65 61 20 68 65 72 65 20 |  The id|ea here |
|00005000| 69 73 20 76 65 72 79 20 | 73 69 6d 70 6c 65 2e 0a |is very |simple..|
|00005010| 54 61 6b 65 20 31 30 30 | 20 6e 6f 75 6e 73 2c 20 |Take 100| nouns, |
|00005020| 31 30 30 20 76 65 72 62 | 73 2c 20 31 30 30 20 61 |100 verb|s, 100 a|
|00005030| 64 6a 65 63 74 69 76 65 | 20 61 6e 64 20 31 30 30 |djective| and 100|
|00005040| 20 61 64 76 65 72 62 73 | 2e 20 20 47 65 6e 65 72 | adverbs|.  Gener|
|00005050| 61 74 65 20 61 6e 0a 65 | 69 67 68 74 20 64 69 67 |ate an.e|ight dig|
|00005060| 69 74 20 72 61 6e 64 6f | 6d 20 6e 75 6d 62 65 72 |it rando|m number|
|00005070| 2e 20 20 43 6f 6e 73 69 | 64 65 72 20 69 74 20 61 |.  Consi|der it a|
|00005080| 73 20 66 6f 75 72 20 32 | 20 64 69 67 69 74 20 72 |s four 2| digit r|
|00005090| 61 6e 64 6f 6d 20 6e 75 | 6d 62 65 72 73 0a 61 6e |andom nu|mbers.an|
|000050a0| 64 20 75 73 65 20 74 68 | 61 74 20 74 6f 20 70 69 |d use th|at to pi|
|000050b0| 63 6b 20 6f 6e 65 20 6f | 66 20 65 61 63 68 20 6f |ck one o|f each o|
|000050c0| 66 20 74 68 65 20 61 62 | 6f 76 65 20 70 61 72 74 |f the ab|ove part|
|000050d0| 73 20 6f 66 20 73 70 65 | 65 63 68 2e 20 20 54 68 |s of spe|ech.  Th|
|000050e0| 65 0a 75 73 65 72 20 69 | 73 20 74 68 65 6e 20 67 |e.user i|s then g|
|000050f0| 69 76 65 6e 20 61 20 70 | 68 72 61 73 65 20 6c 69 |iven a p|hrase li|
|00005100| 6b 65 20 60 60 4f 72 61 | 6e 67 65 20 43 61 72 73 |ke ``Ora|nge Cars|
|00005110| 20 53 6c 65 65 70 20 51 | 75 69 63 6b 6c 79 2e 27 | Sleep Q|uickly.'|
|00005120| 27 20 20 54 68 65 0a 77 | 6f 72 64 73 20 77 69 74 |'  The.w|ords wit|
|00005130| 68 69 6e 20 65 61 63 68 | 20 6c 69 73 74 20 61 72 |hin each| list ar|
|00005140| 65 20 75 6e 69 71 75 65 | 6c 79 20 64 65 74 65 72 |e unique|ly deter|
|00005150| 6d 69 6e 65 64 20 62 79 | 20 74 68 65 69 72 20 66 |mined by| their f|
|00005160| 69 72 73 74 20 74 77 6f | 0a 63 68 61 72 61 63 74 |irst two|.charact|
|00005170| 65 72 73 2e 20 20 54 68 | 65 20 75 73 65 72 20 6d |ers.  Th|e user m|
|00005180| 61 79 20 74 68 65 6e 20 | 74 79 70 65 20 74 68 65 |ay then |type the|
|00005190| 20 70 68 72 61 73 65 2c | 20 74 68 65 20 66 69 72 | phrase,| the fir|
|000051a0| 73 74 20 66 65 77 20 6c | 65 74 74 65 72 73 0a 6f |st few l|etters.o|
|000051b0| 66 20 65 61 63 68 20 77 | 6f 72 64 20 6f 72 20 74 |f each w|ord or t|
|000051c0| 68 65 20 65 69 67 68 74 | 20 64 69 67 69 74 20 6e |he eight| digit n|
|000051d0| 75 6d 62 65 72 2e 0a 0a | 54 68 65 20 70 68 72 61 |umber...|The phra|
|000051e0| 73 65 73 20 61 72 65 20 | 65 61 73 79 20 74 6f 20 |ses are |easy to |
|000051f0| 72 65 6d 65 6d 62 65 72 | 2c 20 74 68 65 20 73 79 |remember|, the sy|
|00005200| 73 74 65 6d 20 72 65 6d | 61 69 6e 73 20 6a 75 73 |stem rem|ains jus|
|00005210| 74 20 61 73 20 73 65 63 | 75 72 65 20 69 66 0a 79 |t as sec|ure if.y|
|00005220| 6f 75 20 70 75 62 6c 69 | 73 68 20 74 68 65 20 6c |ou publi|sh the l|
|00005230| 69 73 74 20 6f 66 20 77 | 6f 72 64 73 20 61 6e 64 |ist of w|ords and|
|00005240| 20 68 61 73 20 61 62 6f | 75 74 20 32 36 20 62 69 | has abo|ut 26 bi|
|00005250| 74 73 20 6f 66 20 72 61 | 6e 64 6f 6d 6e 65 73 73 |ts of ra|ndomness|
|00005260| 2e 0a 4f 6e 65 20 63 61 | 6e 20 61 64 61 70 74 20 |..One ca|n adapt |
|00005270| 74 68 65 20 73 79 73 74 | 65 6d 20 64 6f 77 6e 20 |the syst|em down |
|00005280| 74 6f 20 74 68 72 65 65 | 20 77 6f 72 64 73 20 77 |to three| words w|
|00005290| 69 74 68 20 32 30 20 62 | 69 74 73 20 6f 66 0a 72 |ith 20 b|its of.r|
|000052a0| 61 6e 64 6f 6d 6e 65 73 | 73 20 61 6e 64 20 73 74 |andomnes|s and st|
|000052b0| 69 6c 6c 20 62 65 20 73 | 75 66 66 69 63 69 65 6e |ill be s|ufficien|
|000052c0| 74 6c 79 20 73 61 66 65 | 20 66 6f 72 20 6d 6f 73 |tly safe| for mos|
|000052d0| 74 20 61 70 70 6c 69 63 | 61 74 69 6f 6e 73 2e 0a |t applic|ations..|
|000052e0| 0a 5c 65 6e 64 7b 64 65 | 73 63 72 69 70 74 69 6f |.\end{de|scriptio|
|000052f0| 6e 7d 0a 0a 49 20 62 65 | 6c 69 65 76 65 20 74 68 |n}..I be|lieve th|
|00005300| 61 74 20 6d 61 63 68 69 | 6e 65 20 67 65 6e 65 72 |at machi|ne gener|
|00005310| 61 74 65 64 20 70 61 73 | 73 77 6f 72 64 73 20 61 |ated pas|swords a|
|00005320| 72 65 20 67 65 6e 65 72 | 61 6c 6c 79 20 61 20 62 |re gener|ally a b|
|00005330| 61 64 0a 73 6f 6c 75 74 | 69 6f 6e 20 74 6f 20 74 |ad.solut|ion to t|
|00005340| 68 65 20 70 61 73 73 77 | 6f 72 64 20 70 72 6f 62 |he passw|ord prob|
|00005350| 6c 65 6d 2e 20 20 49 66 | 20 79 6f 75 20 6d 75 73 |lem.  If| you mus|
|00005360| 74 20 75 73 65 20 74 68 | 65 6d 2c 20 49 20 73 74 |t use th|em, I st|
|00005370| 72 6f 6e 67 6c 79 0a 75 | 72 67 65 20 74 68 65 20 |rongly.u|rge the |
|00005380| 75 73 65 20 6f 66 20 70 | 61 73 73 2d 70 68 72 61 |use of p|ass-phra|
|00005390| 73 65 73 20 6f 76 65 72 | 20 74 68 65 20 6f 74 68 |ses over| the oth|
|000053a0| 65 72 20 6d 65 74 68 6f | 64 73 2e 20 20 49 6e 20 |er metho|ds.  In |
|000053b0| 61 6e 79 20 65 76 65 6e | 74 2c 20 69 66 0a 79 6f |any even|t, if.yo|
|000053c0| 75 72 20 63 65 6e 74 65 | 72 20 69 73 20 75 73 69 |ur cente|r is usi|
|000053d0| 6e 67 20 6d 61 63 68 69 | 6e 65 20 67 65 6e 65 72 |ng machi|ne gener|
|000053e0| 61 74 65 64 20 70 61 73 | 73 77 6f 72 64 73 2c 20 |ated pas|swords, |
|000053f0| 79 6f 75 20 73 68 6f 75 | 6c 64 20 63 6f 6e 73 69 |you shou|ld consi|
|00005400| 64 65 72 0a 72 75 6e 6e | 69 6e 67 20 61 6e 20 6f |der.runn|ing an o|
|00005410| 63 63 61 73 69 6f 6e 61 | 6c 20 73 77 65 65 70 20 |ccasiona|l sweep |
|00005420| 6f 76 65 72 20 74 68 65 | 20 65 6e 74 69 72 65 20 |over the| entire |
|00005430| 75 73 65 72 20 66 69 6c | 65 20 73 79 73 74 65 6d |user fil|e system|
|00005440| 20 6c 6f 6f 6b 69 6e 67 | 0a 66 6f 72 20 73 63 72 | looking|.for scr|
|00005450| 69 70 74 73 20 63 6f 6e | 74 61 69 6e 69 6e 67 20 |ipts con|taining |
|00005460| 74 68 65 73 65 20 70 61 | 73 73 77 6f 72 64 73 2e |these pa|sswords.|
|00005470| 20 20 50 72 6f 70 65 72 | 20 73 65 6c 65 63 74 69 |  Proper| selecti|
|00005480| 6f 6e 20 6f 66 20 79 6f | 75 72 0a 70 61 73 73 77 |on of yo|ur.passw|
|00005490| 6f 72 64 20 67 65 6e 65 | 72 61 74 69 6f 6e 20 61 |ord gene|ration a|
|000054a0| 6c 67 6f 72 69 74 68 6d | 20 63 61 6e 20 6d 61 6b |lgorithm| can mak|
|000054b0| 65 20 74 68 69 73 20 6d | 75 63 68 20 65 61 73 69 |e this m|uch easi|
|000054c0| 65 72 20 74 68 61 6e 20 | 69 74 0a 73 6f 75 6e 64 |er than |it.sound|
|000054d0| 73 2e 20 0a 0a 41 73 20 | 77 69 74 68 20 61 6c 6d |s. ..As |with alm|
|000054e0| 6f 73 74 20 61 6c 6c 20 | 70 61 73 73 77 6f 72 64 |ost all |password|
|000054f0| 20 69 73 73 75 65 73 2c | 20 74 68 65 20 75 73 65 | issues,| the use|
|00005500| 72 20 6f 66 20 61 20 73 | 69 6e 67 6c 65 20 63 6f |r of a s|ingle co|
|00005510| 6d 70 75 74 65 72 0a 63 | 65 6e 74 65 72 20 77 68 |mputer.c|enter wh|
|00005520| 69 63 68 20 67 69 76 65 | 73 20 68 69 6d 20 6f 6e |ich give|s him on|
|00005530| 65 20 6d 61 63 68 69 6e | 65 20 67 65 6e 65 72 61 |e machin|e genera|
|00005540| 74 65 64 20 70 61 73 73 | 77 6f 72 64 20 66 6f 72 |ted pass|word for|
|00005550| 20 20 61 63 63 65 73 73 | 20 74 6f 0a 61 6c 6c 20 |  access| to.all |
|00005560| 74 68 65 20 6d 61 63 68 | 69 6e 65 73 20 68 65 20 |the mach|ines he |
|00005570| 77 69 6c 6c 20 75 73 65 | 20 77 69 6c 6c 20 6e 6f |will use| will no|
|00005580| 74 20 68 61 76 65 20 6e | 65 61 72 6c 79 20 74 68 |t have n|early th|
|00005590| 65 20 6c 65 76 65 6c 20 | 6f 66 0a 64 69 66 66 69 |e level |of.diffi|
|000055a0| 63 75 6c 74 79 20 61 73 | 20 74 68 65 20 75 73 65 |culty as| the use|
|000055b0| 72 20 77 68 6f 20 75 73 | 65 73 20 63 6f 6d 70 75 |r who us|es compu|
|000055c0| 74 65 72 73 20 61 74 20 | 6d 61 6e 79 20 63 65 6e |ters at |many cen|
|000055d0| 74 65 72 73 20 61 6e 64 | 20 6d 69 67 68 74 0a 68 |ters and| might.h|
|000055e0| 61 76 65 20 74 6f 20 72 | 65 6d 65 6d 62 65 72 20 |ave to r|emember |
|000055f0| 64 6f 7a 65 6e 73 20 6f | 72 20 65 76 65 6e 20 68 |dozens o|r even h|
|00005600| 75 6e 64 72 65 64 73 20 | 6f 66 20 73 75 63 68 20 |undreds |of such |
|00005610| 70 61 73 73 77 6f 72 64 | 73 2e 0a 0a 5c 73 75 62 |password|s...\sub|
|00005620| 73 75 62 73 65 63 74 69 | 6f 6e 7b 54 68 65 20 53 |subsecti|on{The S|
|00005630| 6f 72 72 6f 77 73 20 6f | 66 20 53 70 65 63 69 61 |orrows o|f Specia|
|00005640| 6c 20 50 75 72 70 6f 73 | 65 20 48 61 72 64 77 61 |l Purpos|e Hardwa|
|00005650| 72 65 7d 0a 0a 57 69 74 | 68 20 74 68 65 20 70 72 |re}..Wit|h the pr|
|00005660| 6f 62 6c 65 6d 73 20 6f | 66 20 62 72 6f 61 64 63 |oblems o|f broadc|
|00005670| 61 73 74 20 6e 65 74 77 | 6f 72 6b 73 20 61 6e 64 |ast netw|orks and|
|00005680| 20 75 73 65 72 20 73 65 | 6c 65 63 74 69 6e 67 20 | user se|lecting |
|00005690| 62 61 64 0a 70 61 73 73 | 77 6f 72 64 73 20 6f 72 |bad.pass|words or|
|000056a0| 20 72 65 62 65 6c 6c 69 | 6e 67 20 61 74 20 6d 61 | rebelli|ng at ma|
|000056b0| 63 68 69 6e 65 20 67 65 | 6e 65 72 61 74 65 64 20 |chine ge|nerated |
|000056c0| 70 61 73 73 77 6f 72 64 | 2c 20 73 6f 6d 65 20 66 |password|, some f|
|000056d0| 61 63 69 6c 69 74 69 65 | 73 0a 68 61 76 65 20 74 |acilitie|s.have t|
|000056e0| 75 72 6e 65 64 20 74 6f | 20 73 70 65 63 69 61 6c |urned to| special|
|000056f0| 20 70 75 72 70 6f 73 65 | 20 68 61 72 64 77 61 72 | purpose| hardwar|
|00005700| 65 20 74 68 61 74 20 67 | 65 6e 65 72 61 74 65 73 |e that g|enerates|
|00005710| 20 6b 65 79 73 0a 64 79 | 6e 61 6d 69 63 61 6c 6c | keys.dy|namicall|
|00005720| 79 2e 20 20 47 65 6e 65 | 72 61 6c 6c 79 20 74 68 |y.  Gene|rally th|
|00005730| 65 73 65 20 64 65 76 69 | 63 65 73 20 6c 6f 6f 6b |ese devi|ces look|
|00005740| 20 6c 69 6b 65 20 73 6d | 61 6c 6c 20 63 61 6c 63 | like sm|all calc|
|00005750| 75 6c 61 74 6f 72 73 20 | 28 6f 72 0a 73 6d 61 72 |ulators |(or.smar|
|00005760| 74 20 63 61 72 64 29 20 | 61 6e 64 20 77 68 65 6e |t card) |and when|
|00005770| 20 61 20 75 73 65 72 20 | 65 6e 74 65 72 73 20 61 | a user |enters a|
|00005780| 20 73 68 6f 72 74 20 70 | 61 73 73 77 6f 72 64 20 | short p|assword |
|00005790| 28 6f 66 74 65 6e 20 66 | 6f 75 72 0a 64 69 67 69 |(often f|our.digi|
|000057a0| 74 73 29 20 74 68 65 79 | 20 67 69 76 65 20 68 69 |ts) they| give hi|
|000057b0| 6d 20 61 20 70 61 73 73 | 77 6f 72 64 20 74 68 61 |m a pass|word tha|
|000057c0| 74 20 69 73 20 67 6f 6f | 64 20 66 6f 72 20 61 20 |t is goo|d for a |
|000057d0| 73 69 6e 67 6c 65 20 75 | 73 65 2e 20 20 49 66 0a |single u|se.  If.|
|000057e0| 74 68 65 20 70 65 72 73 | 6f 6e 20 77 61 6e 74 73 |the pers|on wants|
|000057f0| 20 74 6f 20 6c 6f 67 69 | 6e 20 61 67 61 69 6e 2c | to logi|n again,|
|00005800| 20 68 65 20 6d 75 73 74 | 20 67 65 74 20 61 20 6e | he must| get a n|
|00005810| 65 77 20 70 61 73 73 77 | 6f 72 64 20 66 72 6f 6d |ew passw|ord from|
|00005820| 20 68 69 73 0a 6b 65 79 | 2d 67 65 6e 65 72 61 74 | his.key|-generat|
|00005830| 6f 72 2e 0a 0a 57 69 74 | 68 20 61 20 66 65 77 20 |or...Wit|h a few |
|00005840| 65 78 63 65 70 74 69 6f | 6e 73 2c 20 74 68 65 20 |exceptio|ns, the |
|00005850| 74 65 63 68 6e 6f 6c 6f | 67 79 20 6f 66 20 74 68 |technolo|gy of th|
|00005860| 65 73 65 20 64 65 76 69 | 63 65 73 20 77 6f 72 6b |ese devi|ces work|
|00005870| 73 20 76 65 72 79 0a 77 | 65 6c 6c 2e 20 20 54 68 |s very.w|ell.  Th|
|00005880| 65 20 65 78 63 65 70 74 | 69 6f 6e 73 20 69 6e 63 |e except|ions inc|
|00005890| 6c 75 64 65 20 73 79 73 | 74 65 6d 73 20 77 69 74 |lude sys|tems wit|
|000058a0| 68 20 62 61 64 20 74 69 | 6d 65 20 73 79 6e 63 68 |h bad ti|me synch|
|000058b0| 72 6f 6e 69 7a 61 74 69 | 6f 6e 2c 0a 75 6e 72 65 |ronizati|on,.unre|
|000058c0| 6c 69 61 62 6c 65 20 6f | 72 20 66 72 61 67 69 6c |liable o|r fragil|
|000058d0| 65 20 68 61 72 64 77 61 | 72 65 20 6f 72 20 76 65 |e hardwa|re or ve|
|000058e0| 72 79 20 73 68 6f 72 74 | 20 67 65 6e 65 72 61 74 |ry short| generat|
|000058f0| 65 64 20 6b 65 79 73 2e | 20 20 49 6e 20 61 74 0a |ed keys.|  In at.|
|00005900| 6c 65 61 73 74 20 6f 6e | 65 20 63 61 73 65 20 74 |least on|e case t|
|00005910| 68 65 20 67 65 6e 65 72 | 61 74 65 64 20 6b 65 79 |he gener|ated key|
|00005920| 73 20 77 65 72 65 20 73 | 6f 20 73 68 6f 72 74 20 |s were s|o short |
|00005930| 74 68 61 74 20 69 74 20 | 77 61 73 20 66 61 73 74 |that it |was fast|
|00005940| 65 72 20 74 6f 0a 61 74 | 74 61 63 6b 20 74 68 65 |er to.at|tack the|
|00005950| 20 6d 61 63 68 69 6e 65 | 20 62 79 20 67 75 65 73 | machine| by gues|
|00005960| 73 69 6e 67 20 74 68 65 | 20 70 61 73 73 77 6f 72 |sing the| passwor|
|00005970| 64 20 60 60 31 31 31 31 | 27 27 20 74 68 61 6e 20 |d ``1111|'' than |
|00005980| 62 79 20 67 75 65 73 73 | 69 6e 67 20 61 74 0a 74 |by guess|ing at.t|
|00005990| 68 65 20 75 73 65 72 20 | 67 65 6e 65 72 61 74 65 |he user |generate|
|000059a0| 64 20 70 61 73 73 77 6f | 72 64 73 20 69 74 20 72 |d passwo|rds it r|
|000059b0| 65 70 6c 61 63 65 64 2e | 20 20 0a 0a 44 65 73 70 |eplaced.|  ..Desp|
|000059c0| 69 74 65 20 74 68 65 20 | 74 65 63 68 6e 6f 6c 6f |ite the |technolo|
|000059d0| 67 79 20 6f 66 20 74 68 | 65 73 65 20 64 65 76 69 |gy of th|ese devi|
|000059e0| 63 65 73 20 77 6f 72 6b | 69 6e 67 20 77 65 6c 6c |ces work|ing well|
|000059f0| 20 61 6e 64 20 74 68 65 | 0a 69 6e 73 74 61 6c 6c | and the|.install|
|00005a00| 61 74 69 6f 6e 20 67 65 | 6e 65 72 61 6c 6c 79 20 |ation ge|nerally |
|00005a10| 62 65 69 6e 67 20 61 6c | 6d 6f 73 74 20 70 61 69 |being al|most pai|
|00005a20| 6e 6c 65 73 73 2c 20 74 | 68 65 72 65 20 61 72 65 |nless, t|here are|
|00005a30| 20 74 77 6f 20 73 65 72 | 69 6f 75 73 0a 70 72 6f | two ser|ious.pro|
|00005a40| 62 6c 65 6d 73 20 77 69 | 74 68 20 74 68 65 69 72 |blems wi|th their|
|00005a50| 20 75 73 65 2e 20 20 20 | 20 54 68 65 20 66 69 72 | use.   | The fir|
|00005a60| 73 74 20 69 73 20 63 6f | 73 74 2e 20 20 42 75 79 |st is co|st.  Buy|
|00005a70| 69 6e 67 20 61 20 64 65 | 76 69 63 65 20 66 6f 72 |ing a de|vice for|
|00005a80| 20 61 0a 75 73 65 72 20 | 6f 66 20 20 6c 61 72 67 | a.user |of  larg|
|00005a90| 65 20 63 65 6e 74 65 72 | 20 63 61 6e 20 65 61 73 |e center| can eas|
|00005aa0| 69 6c 79 20 63 6f 73 74 | 20 6d 6f 72 65 20 74 68 |ily cost| more th|
|00005ab0| 61 6e 20 61 6e 20 61 64 | 64 69 74 69 6f 6e 61 6c |an an ad|ditional|
|00005ac0| 0a 6d 61 69 6e 66 72 61 | 6d 65 2e 20 20 54 68 65 |.mainfra|me.  The|
|00005ad0| 20 73 65 63 6f 6e 64 20 | 70 72 6f 62 6c 65 6d 20 | second |problem |
|00005ae0| 69 73 20 6d 6f 72 65 20 | 73 65 72 69 6f 75 73 2e |is more |serious.|
|00005af0| 20 20 54 68 69 73 20 69 | 73 20 6f 6e 65 20 6f 66 |  This i|s one of|
|00005b00| 20 75 73 65 72 0a 72 65 | 6c 75 63 74 61 6e 63 65 | user.re|luctance|
|00005b10| 2e 20 20 4d 6f 73 74 20 | 75 73 65 72 73 20 61 72 |.  Most |users ar|
|00005b20| 65 20 75 6e 77 69 6c 6c | 69 6e 67 20 74 6f 20 63 |e unwill|ing to c|
|00005b30| 61 72 72 79 20 61 6e 20 | 65 78 74 72 61 20 64 65 |arry an |extra de|
|00005b40| 76 69 63 65 20 61 6e 64 | 20 74 68 65 0a 70 65 6f |vice and| the.peo|
|00005b50| 70 6c 65 20 77 68 6f 20 | 61 72 65 20 75 73 65 72 |ple who |are user|
|00005b60| 73 20 6f 66 20 6d 61 6e | 79 20 63 65 6e 74 65 72 |s of man|y center|
|00005b70| 73 20 61 72 65 20 65 76 | 65 6e 20 6c 65 73 73 20 |s are ev|en less |
|00005b80| 77 69 6c 6c 69 6e 67 20 | 74 6f 20 68 6f 6c 64 20 |willing |to hold |
|00005b90| 61 0a 64 6f 7a 65 6e 20 | 73 75 63 68 20 64 65 76 |a.dozen |such dev|
|00005ba0| 69 63 65 73 20 61 6e 64 | 20 72 65 6d 65 6d 62 65 |ices and| remembe|
|00005bb0| 72 20 77 68 69 63 68 20 | 69 73 20 77 68 69 63 68 |r which |is which|
|00005bc0| 2e 0a 0a 49 6e 20 6f 6e | 65 20 63 65 6e 74 65 72 |...In on|e center|
|00005bd0| 2c 20 74 68 65 73 65 20 | 64 65 76 69 63 65 73 20 |, these |devices |
|00005be0| 77 65 72 65 20 75 73 65 | 64 20 6f 6e 6c 79 20 66 |were use|d only f|
|00005bf0| 6f 72 20 70 72 69 76 69 | 6c 65 67 65 64 20 61 63 |or privi|leged ac|
|00005c00| 63 65 73 73 65 73 20 69 | 6e 69 74 69 61 74 65 64 |cesses i|nitiated|
|00005c10| 0a 66 72 6f 6d 20 69 6e | 73 65 63 75 72 65 20 6c |.from in|secure l|
|00005c20| 6f 63 61 74 69 6f 6e 73 | 2e 20 20 4f 6e 6c 79 20 |ocations|.  Only |
|00005c30| 61 20 68 61 6e 64 66 75 | 6c 20 6f 66 20 74 68 65 |a handfu|l of the|
|00005c40| 6d 20 68 61 64 20 74 6f | 20 62 65 20 6d 61 64 65 |m had to| be made|
|00005c50| 2e 0a 28 42 65 69 6e 67 | 20 69 6e 6e 6f 76 61 74 |..(Being| innovat|
|00005c60| 69 76 65 2c 20 74 68 65 | 20 63 65 6e 74 65 72 20 |ive, the| center |
|00005c70| 73 74 61 66 66 20 62 75 | 69 6c 74 20 74 68 65 6d |staff bu|ilt them|
|00005c80| 20 66 72 6f 6d 20 6f 6c | 64 20 70 72 6f 67 72 61 | from ol|d progra|
|00005c90| 6d 6d 61 62 6c 65 0a 63 | 61 6c 63 75 6c 61 74 6f |mmable.c|alculato|
|00005ca0| 72 73 2e 29 20 20 54 68 | 65 79 20 77 65 72 65 20 |rs.)  Th|ey were |
|00005cb0| 75 73 65 64 20 6f 6e 6c | 79 20 62 79 20 74 68 65 |used onl|y by the|
|00005cc0| 20 60 60 6f 6e 20 63 61 | 6c 6c 27 27 20 73 79 73 | ``on ca|ll'' sys|
|00005cd0| 74 65 6d 0a 70 72 6f 67 | 72 61 6d 6d 65 72 20 77 |tem.prog|rammer w|
|00005ce0| 68 65 6e 20 68 61 6e 64 | 6c 69 6e 67 20 65 6d 65 |hen hand|ling eme|
|00005cf0| 72 67 65 6e 63 69 65 73 | 20 61 6e 64 20 70 72 6f |rgencies| and pro|
|00005d00| 76 69 64 65 64 20 73 6f | 6d 65 20 73 65 63 75 72 |vided so|me secur|
|00005d10| 69 74 79 0a 77 69 74 68 | 6f 75 74 20 62 65 69 6e |ity.with|out bein|
|00005d20| 67 20 74 6f 20 6f 62 74 | 72 75 73 69 76 65 2e 0a |g to obt|rusive..|
|00005d30| 0a 5c 73 75 62 73 75 62 | 73 65 63 74 69 6f 6e 7b |.\subsub|section{|
|00005d40| 49 73 20 57 72 69 74 69 | 6e 67 20 50 61 73 73 77 |Is Writi|ng Passw|
|00005d50| 6f 72 64 73 20 44 6f 77 | 6e 20 74 68 61 74 20 42 |ords Dow|n that B|
|00005d60| 61 64 3f 7d 0a 0a 4f 6e | 65 20 6f 66 20 74 68 65 |ad?}..On|e of the|
|00005d70| 20 66 69 72 73 74 20 74 | 68 69 6e 67 73 20 74 68 | first t|hings th|
|00005d80| 61 74 20 77 65 20 77 65 | 72 65 20 61 6c 6c 20 74 |at we we|re all t|
|00005d90| 6f 6c 64 20 77 68 65 6e | 20 77 65 20 62 65 67 61 |old when| we bega|
|00005da0| 6e 20 75 73 69 6e 67 0a | 74 69 6d 65 73 68 61 72 |n using.|timeshar|
|00005db0| 69 6e 67 20 69 73 20 74 | 68 61 74 20 6f 6e 65 20 |ing is t|hat one |
|00005dc0| 73 68 6f 75 6c 64 20 6e | 65 76 65 72 20 77 72 69 |should n|ever wri|
|00005dd0| 74 65 20 64 6f 77 6e 20 | 70 61 73 73 77 6f 72 64 |te down |password|
|00005de0| 73 2e 20 20 49 20 61 67 | 72 65 65 0a 74 68 61 74 |s.  I ag|ree.that|
|00005df0| 20 74 68 65 20 75 73 65 | 72 73 20 73 68 6f 75 6c | the use|rs shoul|
|00005e00| 64 20 6e 6f 74 20 72 65 | 63 6f 72 64 20 74 68 65 |d not re|cord the|
|00005e10| 69 72 20 70 61 73 73 77 | 6f 72 64 73 20 6f 6e 2d |ir passw|ords on-|
|00005e20| 6c 69 6e 65 2e 20 20 54 | 68 65 72 65 20 68 61 76 |line.  T|here hav|
|00005e30| 65 0a 62 65 65 6e 20 61 | 20 6c 61 72 67 65 20 6e |e.been a| large n|
|00005e40| 75 6d 62 65 72 20 6f 66 | 20 62 72 65 61 6b 2d 69 |umber of| break-i|
|00005e50| 6e 73 20 65 6e 61 62 6c | 65 20 62 79 20 61 20 75 |ns enabl|e by a u|
|00005e60| 73 65 72 20 68 61 76 69 | 6e 67 20 61 20 62 61 74 |ser havi|ng a bat|
|00005e70| 63 68 0a 73 63 72 69 70 | 74 20 74 68 61 74 20 77 |ch.scrip|t that w|
|00005e80| 6f 75 6c 64 20 69 6e 63 | 6c 75 64 65 20 61 20 63 |ould inc|lude a c|
|00005e90| 6c 65 61 72 2d 74 65 78 | 74 20 70 61 73 73 77 6f |lear-tex|t passwo|
|00005ea0| 72 64 20 74 6f 20 6c 65 | 74 20 74 68 65 6d 20 6c |rd to le|t them l|
|00005eb0| 6f 67 69 6e 20 74 6f 20 | 61 6e 6f 74 68 65 72 0a |ogin to |another.|
|00005ec0| 6d 61 63 68 69 6e 65 2e | 0a 0a 4f 6e 20 74 68 65 |machine.|..On the|
|00005ed0| 20 6f 74 68 65 72 20 68 | 61 6e 64 2c 20 68 6f 77 | other h|and, how|
|00005ee0| 20 6f 66 74 65 6e 20 68 | 61 73 20 79 6f 75 72 20 | often h|as your |
|00005ef0| 77 61 6c 6c 65 74 20 62 | 65 65 6e 20 73 74 6f 6c |wallet b|een stol|
|00005f00| 65 6e 3f 20 20 49 20 62 | 65 6c 69 65 76 65 0a 74 |en?  I b|elieve.t|
|00005f10| 68 61 74 20 61 20 70 61 | 73 73 77 6f 72 64 20 77 |hat a pa|ssword w|
|00005f20| 72 69 74 74 65 6e 20 64 | 6f 77 6e 20 69 6e 20 77 |ritten d|own in w|
|00005f30| 61 6c 6c 65 74 20 69 73 | 20 70 72 6f 62 61 62 6c |allet is| probabl|
|00005f40| 79 20 6e 6f 74 20 61 20 | 73 65 72 69 6f 75 73 20 |y not a |serious |
|00005f50| 72 69 73 6b 0a 69 6e 20 | 63 6f 6d 70 61 72 69 73 |risk.in |comparis|
|00005f60| 6f 6e 20 74 6f 20 6f 74 | 68 65 72 20 74 68 65 20 |on to ot|her the |
|00005f70| 70 72 6f 62 6c 65 6d 73 | 20 69 6e 63 6c 75 64 69 |problems| includi|
|00005f80| 6e 67 20 74 68 65 20 73 | 65 6c 65 63 74 69 6f 6e |ng the s|election|
|00005f90| 20 6f 66 0a 60 60 64 75 | 6d 62 27 27 20 70 61 73 | of.``du|mb'' pas|
|00005fa0| 73 77 6f 72 64 20 74 68 | 61 74 20 61 72 65 20 65 |sword th|at are e|
|00005fb0| 61 73 69 65 72 20 74 6f | 20 72 65 6d 65 6d 62 65 |asier to| remembe|
|00005fc0| 72 2e 20 20 49 6e 20 63 | 6c 61 73 73 69 66 69 65 |r.  In c|lassifie|
|00005fd0| 64 20 73 79 73 74 65 6d | 73 2c 0a 74 68 69 73 20 |d system|s,.this |
|00005fe0| 69 73 2c 20 6f 66 20 63 | 6f 75 72 73 65 2c 20 6e |is, of c|ourse, n|
|00005ff0| 6f 74 20 70 65 72 6d 69 | 74 74 65 64 2e 0a 0a 5c |ot permi|tted...\|
|00006000| 73 75 62 73 75 62 73 65 | 63 74 69 6f 6e 7b 54 68 |subsubse|ction{Th|
|00006010| 65 20 54 72 75 74 68 20 | 61 62 6f 75 74 20 50 61 |e Truth |about Pa|
|00006020| 73 73 77 6f 72 64 20 41 | 67 69 6e 67 7d 0a 0a 53 |ssword A|ging}..S|
|00006030| 6f 6d 65 20 66 61 63 69 | 6c 69 74 69 65 73 20 66 |ome faci|lities f|
|00006040| 6f 72 63 65 20 75 73 65 | 72 73 20 74 6f 20 63 68 |orce use|rs to ch|
|00006050| 61 6e 67 65 20 74 68 65 | 69 72 20 70 61 73 73 77 |ange the|ir passw|
|00006060| 6f 72 64 73 20 6f 6e 20 | 61 20 72 65 67 75 6c 61 |ords on |a regula|
|00006070| 72 0a 62 61 73 69 73 2e | 20 20 54 68 69 73 20 68 |r.basis.|  This h|
|00006080| 61 73 20 74 68 65 20 62 | 65 6e 65 66 69 63 69 61 |as the b|eneficia|
|00006090| 6c 20 73 69 64 65 20 65 | 66 66 65 63 74 20 6f 66 |l side e|ffect of|
|000060a0| 20 72 65 6d 6f 76 69 6e | 67 20 64 6f 72 6d 61 6e | removin|g dorman|
|000060b0| 74 0a 61 63 63 6f 75 6e | 74 73 2e 20 20 49 74 20 |t.accoun|ts.  It |
|000060c0| 69 73 20 61 6c 73 6f 20 | 74 68 65 20 63 61 73 65 |is also |the case|
|000060d0| 20 74 68 61 74 20 69 74 | 20 6c 69 6d 69 74 73 20 | that it| limits |
|000060e0| 74 68 65 20 75 74 69 6c | 69 74 79 20 6f 66 20 61 |the util|ity of a|
|000060f0| 20 73 74 6f 6c 65 6e 0a | 70 61 73 73 77 6f 72 64 | stolen.|password|
|00006100| 2e 20 0a 0a 57 68 69 6c | 65 20 74 68 65 73 65 20 |. ..Whil|e these |
|00006110| 61 72 65 20 67 6f 6f 64 | 20 61 6e 64 20 77 6f 72 |are good| and wor|
|00006120| 74 68 77 68 69 6c 65 20 | 65 66 66 65 63 74 73 2c |thwhile |effects,|
|00006130| 20 6d 6f 73 74 20 73 79 | 73 74 65 6d 0a 61 64 6d | most sy|stem.adm|
|00006140| 69 6e 69 73 74 72 61 74 | 6f 72 73 20 62 65 6c 69 |inistrat|ors beli|
|00006150| 65 76 65 20 74 68 61 74 | 20 63 68 61 6e 67 69 6e |eve that| changin|
|00006160| 67 20 70 61 73 73 77 6f | 72 64 73 20 6f 6e 20 61 |g passwo|rds on a|
|00006170| 20 72 65 67 75 6c 61 72 | 20 62 61 73 69 73 0a 6d | regular| basis.m|
|00006180| 61 6b 65 73 20 69 74 20 | 68 61 72 64 65 72 20 66 |akes it |harder f|
|00006190| 6f 72 20 61 6e 20 61 74 | 74 61 63 6b 65 72 20 74 |or an at|tacker t|
|000061a0| 6f 20 67 75 65 73 73 20 | 74 68 65 6d 2e 20 20 49 |o guess |them.  I|
|000061b0| 6e 20 70 72 61 63 74 69 | 63 65 2c 20 66 6f 72 20 |n practi|ce, for |
|000061c0| 61 6e 0a 61 74 74 61 63 | 6b 65 72 20 74 68 61 74 |an.attac|ker that|
|000061d0| 20 68 61 73 20 67 6f 74 | 74 65 6e 20 74 68 65 20 | has got|ten the |
|000061e0| 63 72 79 70 74 20 74 65 | 78 74 20 6f 66 20 74 68 |crypt te|xt of th|
|000061f0| 65 20 70 61 73 73 77 6f | 72 64 20 66 69 6c 65 2c |e passwo|rd file,|
|00006200| 20 68 65 0a 67 65 6e 65 | 72 61 6c 6c 79 20 6f 6e | he.gene|rally on|
|00006210| 6c 79 0a 6e 65 65 64 73 | 20 61 20 66 65 77 20 68 |ly.needs| a few h|
|00006220| 6f 75 72 73 20 74 6f 20 | 66 69 6e 64 20 74 68 65 |ours to |find the|
|00006230| 20 70 61 73 73 77 6f 72 | 64 73 20 6f 66 20 69 6e | passwor|ds of in|
|00006240| 74 65 72 65 73 74 20 61 | 6e 64 20 68 65 6e 63 65 |terest a|nd hence|
|00006250| 20 66 72 65 71 75 65 6e | 74 0a 63 68 61 6e 67 65 | frequen|t.change|
|00006260| 73 20 64 6f 20 6e 6f 74 | 20 69 6e 63 72 65 61 73 |s do not| increas|
|00006270| 65 20 74 68 65 20 64 69 | 66 66 69 63 75 6c 74 79 |e the di|fficulty|
|00006280| 20 6f 66 20 68 69 73 20 | 74 61 73 6b 2e 20 20 46 | of his |task.  F|
|00006290| 6f 72 20 74 68 65 20 61 | 74 74 61 63 6b 65 72 20 |or the a|ttacker |
|000062a0| 77 68 6f 0a 69 73 20 67 | 75 65 73 73 69 6e 67 20 |who.is g|uessing |
|000062b0| 77 69 74 68 6f 75 74 20 | 61 20 63 6f 70 79 20 6f |without |a copy o|
|000062c0| 66 20 74 68 65 20 65 6e | 63 72 79 70 74 20 70 61 |f the en|crypt pa|
|000062d0| 73 73 77 6f 72 64 2c 20 | 65 76 65 6e 20 63 68 61 |ssword, |even cha|
|000062e0| 6e 67 69 6e 67 20 74 68 | 65 0a 70 61 73 73 77 6f |nging th|e.passwo|
|000062f0| 72 64 20 65 76 65 72 79 | 20 6d 69 6e 75 74 65 20 |rd every| minute |
|00006300| 77 6f 75 6c 64 20 61 74 | 20 6d 6f 73 74 20 64 6f |would at| most do|
|00006310| 75 62 6c 65 20 74 68 65 | 20 65 66 66 6f 72 74 20 |uble the| effort |
|00006320| 68 65 20 77 6f 75 6c 64 | 20 62 65 0a 72 65 71 75 |he would| be.requ|
|00006330| 69 72 65 64 20 74 6f 20 | 65 78 70 65 6e 64 2e 20 |ired to |expend. |
|00006340| 20 0a 0a 5c 73 75 62 73 | 75 62 73 65 63 74 69 6f | ..\subs|ubsectio|
|00006350| 6e 7b 48 6f 77 20 64 6f | 20 79 6f 75 20 63 68 61 |n{How do| you cha|
|00006360| 6e 67 65 20 61 20 70 61 | 73 73 77 6f 72 64 7d 0a |nge a pa|ssword}.|
|00006370| 0a 55 73 65 72 73 20 73 | 68 6f 75 6c 64 20 62 65 |.Users s|hould be|
|00006380| 20 74 6f 6c 64 20 74 6f | 20 63 68 61 6e 67 65 20 | told to| change |
|00006390| 74 68 65 69 72 20 70 61 | 73 73 77 6f 72 64 73 20 |their pa|sswords |
|000063a0| 77 68 65 6e 65 76 65 72 | 20 74 68 65 79 20 68 61 |whenever| they ha|
|000063b0| 76 65 0a 72 65 61 73 6f | 6e 20 74 6f 20 65 78 70 |ve.reaso|n to exp|
|000063c0| 65 63 74 20 74 68 61 74 | 20 61 6e 6f 74 68 65 72 |ect that| another|
|000063d0| 20 70 65 72 73 6f 6e 20 | 68 61 73 20 6c 65 61 72 | person |has lear|
|000063e0| 6e 65 64 20 74 68 65 69 | 72 20 70 61 73 73 77 6f |ned thei|r passwo|
|000063f0| 72 64 73 20 61 6e 64 0a | 61 66 74 65 72 20 65 61 |rds and.|after ea|
+--------+-------------------------+-------------------------+--------+--------+