Changes between Version 10 and Version 11 of Policy


Ignore:
Timestamp:
Aug 27, 2013 3:02:40 PM (11 years ago)
Author:
jhickey
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • Policy

    v10 v11  
    1313  * '''Let us know if you are done with your project''' - Let us know if you no longer need your project and we'll clean it up for you!
    1414
     15 * '''Use good passwords''' - We are a computer security testbed, so please use a strong password.  You may be reading this because you were told that your new password, 'qwerty1234', is in the dictionary.  We don't mean the Oxford English Dictionary here.  What we use is a large list of dictionary words *combined* with actual passwords that have been found in the wild.  For example, the [http://arstechnica.com/security/2010/01/32-million-passwords-show-most-users-careless-about-security/ RockYou hack] ended up revealing the unencrypted passwords of 32 million people (and about 14 million unique passwords).  Since this list is one of the goto lists for the bad guys, we use it too.  This means that a lot of passwords that seem clever or obscure fail our test because someone else thought up the same thing.  The longer your password, the less likely it is to be in the dictionary.  Try combining multiple words mixed with numbers and symbols.  That way you get an easy to remember password that also will pass our dictionary checks.
    1516
    16  * '''Use good passwords''' - We are a computer security testbed.  Please use a strong password.  Passwords are checked against a large dictionary of known passwords found in the wild.  This means that a password you think is clever will be rejected by the system because it has been thought of by someone else.
    1717 * '''Do not share accounts''' - We will close accounts that we suspect to be shared.
    1818 * '''Talk to us if you have a need''' - We are here to help you.  Although we can't help you write your code, we often can provide useful suggestions about running experiments on the testbed.