Technology news and Jobs 
VIRTUALISATION Tattersall's gamble with password security
VIRTUALISATION Tattersall's gamble with password security | Tattersall's gamble with password security |
|
| by David M Williams | |
| Wednesday, 24 June 2009 | |
|
Page 2 of 2 According to Hitachi’s best practices for password management a password of eight characters that only permits one case as well as numbers has 2.82e12 combinations (that’s 2,820,000,000,000.) By contrast, if both cases are permitted the number of combinations increases substantially to 2.8e14 (or 280,000,000,000,000.)Featured Whitepaper
5 Best Practices for Smartphone Support
Most institutions recommend passwords contain a mixture of upper- and lower- case letters. I personally verified that Tattersall’s did not distinguish between case. I created an account on their site with a password of SMITH123 and was able to successfully log in using password smith123. I phoned Tattersall’s using the telephone number provided to Jeff Wharton to call if he had further enquiries. I asked if there was a reason Tattersall’s did not make this distinction. The person I spoke with was unaware that the web site allowed people to log in using any case variation on their password. I explained the problem and referred to the Complaints and Incidents Officer who had responded to Wharton. I disclosed I was a journalist and the headline of this story. The officer simply advised me that if Tattersall’s knew about this handling of upper- and lower- case characters then they must be satisfied and happy with it. A call has been made to Tattersall's public relations for an official comment and will be added here as soon as it is received. |
Tags
| < Next story in category | Previous story in the category > |
|---|
