Re: Internet Worm

Chris Ellwood (cellwood@gauss.ELEE.CalPoly.EDU)
Sun, 16 Oct 94 12:39:10 PDT

Scott D. Yelich said...
> blah....
> 
> in npassword try this password:
> blubird1.
> 
> does it work for you?  i'm not sure if I have to configure my
> npassword... but it appears that the checks for numbers, case and
> punctuation.. was done before a truncation (even if there is a
> truncation) ... so it's still possible to pick piss-poor passwords.

That's more of a problem with the dictionary file you are using with npasswd
and not npasswd itself.  If 'blubird' was in the dictionary, 'blubird1'
wouldn't get by.  Also, the version of npasswd I have does the checks
both before and after truncation, so that shouldn't be a problem.

- Chris