|visits||member for||1 year, 2 months|
|seen||Apr 14 at 15:59|
What is the best way to inspire users to choose strong password?
This is horrible advice all around. The 2 "problems" given (users may leave a note on their desk or may let their browser/pw manager save them) are extremely good ideas! #1: If an attacker has physical access to your machine you have lost whatever you do, even if you use truecrypt on your whole HDD and secure boot. #2: A virus/trojan that can read the browser's pw file already has to be elevated (assuming the permissions/ACLs are correctly set; you'd hope so in any case) which means it's game over anyhow. "mycat81" would probably be cracked by any modern hardware in a few hours tops.