Re: password change

[robert <http://dummy.us.eu.org/robert>]

 > From: Noelle <http://dummy.us.eu.org/noelleg>
 > Date: Fri, 7 Feb 2014 09:58:52 -0800 (PST)
 >
 > apparently it was supposed to be letter,capital letter,number,character, 9 
 > total,but it took that password anyway
 > i talked to boss & webex for 20 minutes & she concluded if it lets me in 
 > it's good enough

The system administrator could configure the system to require stronger
password standards.  That would be the right way to do this.  Otherwise,
it probably doesn't matter.

Then again, maybe this is just the general failure of your working group
to concern itself with security measures of any sort, including virus
protection.

And, of course, farmerinthedell isn't any better, ironically, considering I'm working
in the computer security unit.

Maybe I should become a security consultant.

 > On Fri, 7 Feb 2014, robert wrote:
 >  >  > From: Noelle <http://dummy.us.eu.org/noelleg>
 >  >  > Date: Fri, 7 Feb 2014 09:12:47 -0800 (PST)
 >  >  >
 >  >  > boss wrote on skype if we get password change pop-up let them know. do 
 >  >  > you 
 >  >  > think i was wrong to change it on my own, since they might want us to use 
 >  >  > 
 >  >  > their own password?
 >  > 
 >  > Depending on a cache of passwords available in plaintext is a very poor
 >  > security policy.  I think it's better that you changed the password and
 >  > that they and nobody else (other than me, as it happens) knows it.  If
 >  > they need access to your account for whatever reason, there should be some
 >  > administrative power to allow them to do that rather than depending upon a
 >  > common password.