Re: [gentoo-user] Coming up with a password that is very strong.

[Dale]

Mick wrote:
> On Tuesday, 5 February 2019 10:13:44 GMT Dale wrote:
>
>> After seeing your reply, I realize I just type the command and it
>> prompts me for a password.  I ctrl c to exit.  Well, ain't that
>> something?  You can stop laughing now.  ;-)
>>
>> It seems to think helloworld and reallysecurepassword is OK.  I have to
>> question just how good this tool is at this point.
> Quite!
>
> I think the cracklib acceptance parameters are not as strict as they could
> have been for modern computing, but I don't know how to tweak them.  With
> johntheripper you have many options to tweak the characters tested, length,
> etc. when checking a password.
>
> PS.  I wasn't laughing at you, I was laughing at the passwords cracklib
> thought were OK.

I'm emerging john* or at least it's thinking on it. 

I was talking about you laughing at my comment about the idiot in the
chair who was using the command wrong.  I have to admit, I was laughing
at myself over here.  lol  I might add, I did try to get a man page or
-h to help but it didn't. 

I've got my password down to something I can remember and isn't to bad
to type.  The password strength meter thingys, while not perfect either,
do say it is a strong one.  My looking at it says it is strong too.  I
just can't imagine anyone guessing it.  It's so random and such that I
think it would be very difficult to crack.  Even if one could, it would
take a fairly long time even with some pretty fast puters.  It may not
be NSA proof either but I suspect it would take even them a while. 
Still, I'd like to test this thing really well if I can find a tool that
can really do it properly.  We already know the meter sites aren't
trustworthy.  It seems cracklib isn't quite there either.  Moving on. 

Thanks for the help.  By the time I get around to using this thing, it
may be easy to crack with some laser type puter or something. 

Dale

:-)  :-)