« Previous Next »

Thread: password too restrictive

Last post 07-23-2009 11:30 PM by steve schofield. 16 replies.

Average Rating Rate It (5)

RSS

Page 1 of 2 (17 items) 1 2 Next >

Sort Posts:

  • 12-17-2008, 2:09 AM

    • riznick
    • Not Ranked
    • Joined on 12-17-2008, 7:07 AM
    • Posts 7

    password too restrictive

    I would prefer to use a simple password when accessing forums.  By forcing us to use Caps and numbers..., many people end up using their more secure passwords making their more secure passwords less secure.

  • 12-17-2008, 8:13 AM In reply to

    Re: password too restrictive

    You mean this site? new settings? mine was pretty ok!!!

    Cheers,
    Bernard Cheah
  • 12-18-2008, 4:40 AM In reply to

    • riznick
    • Not Ranked
    • Joined on 12-17-2008, 7:07 AM
    • Posts 7

    Re: password too restrictive

    maybe im just being cranky.  I like using generic easy passwords for sites where security is of low importance.  Forcing us to have uppercase+lowercase+numbers on a forum seems like overkill.

  • 05-10-2009, 3:49 PM In reply to

    Re: password too restrictive

    when i joined this site, I was told my regular password was not acceptable because the password I had to use (HAD TO use) contains at least one upper case, one lower case, and one numeral in the password. Just who the #*$& do IIS think they are to prescribe user passwords?

    Ridiculous password conventions
  • 05-10-2009, 3:53 PM In reply to

    Re: password too restrictive

    riznick:

    maybe im just being cranky.  I like using generic easy passwords for sites where security is of low importance.  Forcing us to have uppercase+lowercase+numbers on a forum seems like overkill.

    "SEEMS like"? It IS overkill. I would tell those programmers to be less anal-retentive and more user friendly, otherwise their userbase may decline in favor of other sites that are less prescriptive.

     

    Ridiculous password conventions
  • 05-10-2009, 10:57 PM In reply to

    Re: password too restrictive

    One reason for more restrictive passwords is to keep 'spam bots' from invading and ruining a great IIS resource.  I agree having easier to remember and less restrictive passwords for a community site such as this is nice, unfortunately the spammers (ones who create bots) have tried to take advantage of such sites, which in turn make things worthless.  I'll have a more restrictive password and a great IIS resources.  My thoughts :)

    Steve Schofield
    Windows Server MVP - IIS
    http://weblogs.asp.net/steveschofield


    http://www.IISLogs.com
    Log archival solution
    Install, Configure, Forget
  • 05-12-2009, 9:25 AM In reply to

    • tomkmvp
    • Top 10 Contributor
    • Joined on 03-20-2003, 6:27 AM
    • Central NJ
    • Posts 6,189
    • IIS MVPs

    Re: password too restrictive

    I don't even know my password.  I entered it once and told the site to remember me. Doesn't seem like much of an issue ...

  • 05-20-2009, 8:47 AM In reply to

    Re: password too restrictive

    Oohh. mine was err 6 yrs ago... Oops.. bad security practise :)
    Ok Ok.. will change it in 2010.
    Cheers,
    Bernard Cheah
  • 05-20-2009, 10:49 PM In reply to

    Re: password too restrictive

     What is your password pattern again? :)  I'd be willing to test out that bank account security for you.

    Steve Schofield
    Windows Server MVP - IIS
    http://weblogs.asp.net/steveschofield


    http://www.IISLogs.com
    Log archival solution
    Install, Configure, Forget
  • 05-24-2009, 9:01 AM In reply to

    Re: password too restrictive

    Hehe.. I don't have the same password nor pattern for every sites I associated with :) You got 1 more year to go before I change it.
    Cheers,
    Bernard Cheah
  • 07-21-2009, 7:12 PM In reply to

    • 8xup68
    • Not Ranked
    • Joined on 07-11-2009, 12:06 PM
    • Posts 1

    Re: password too restrictive

    qbernard:
    Hehe.. I don't have the same password nor pattern for every sites I associated with :) You got 1 more year to go before I change it.
  • 07-22-2009, 6:28 AM In reply to

    Re: password too restrictive

    That may be the case, tomkmvp, but how many sites do you work on? How many usernames, how many passwords do you have to remember? What happens should your disk crash and all your passwords are lost? Nothing is infallible and especially not Microsoft products, so if you have to reinstall your OS, how do you remember which password you entered "once" and told the site to remember? It's just a cookie that it puts on YOUR hard disk, not on the host site.

    I could not remember my password so I changed it to one that I can remember, only this time it has to have an upper case letter somewhere in the password.

    I still maintain it is far too restrictive, and who cares about 'bots' that send spam? I delete over 50 spam every day.

    Ridiculous password conventions
  • 07-23-2009, 3:39 AM In reply to

    Re: password too restrictive

    Ian, I'm sure Microsoft is reading this as well, it is up to MS to decide what complexity they required for this site. Of coz for community sites this can be a little bit overwhelm, but heck we all have our own opinion.

    For your concern about many passwords, I think it is up to the individual on managing those passwords, I have at least few hundreds, and out of that 100+ is my own and not work related, I maintain two different encrypted files to keep tracks of the password, and for work related, my peers keep the same copy of encrypted files, and for personal one. I let my wife know where I put it and how to unlock it in the event errrr I'm longer available :) and those personal related passwords are not related to community/forums/newsgroup, web memberships etc. For these type of password I just put it on a simple excel file and secure it password, even it got stolen i don't care much at the impact.... at most the attacker can post here under my name. yet. what's the big deal about this?

     

    Cheers,
    Bernard Cheah
  • 07-23-2009, 4:21 AM In reply to

    • floppyho
    • Not Ranked
    • Joined on 07-23-2009, 8:16 AM
    • Posts 4

    Re: password too restrictive

    Well...  People like me think you are obsessive compulsive, whereas you probably think we are lazy.

    I had to create a new account to reply to this message.  Why is that?  I forgot my password here yet again because it is too restrictive.  Not only that, but it takes too long to receive the password reset email. 

    Was the passwords always linked up to MS?  I don't remember that when I created my other account.  Now that this account is hooked up to my  MS account, I wont have to worry about those passwords.

     If enough people complain about something, then it is probably a valid complaint.

  • 07-23-2009, 9:50 AM In reply to

    Re: password too restrictive

    I don't understand why people are complaining about this.

    Especially those that *just* login to complain about passwords. Troll-like if you ask me.

    I make all my passwords complex now as you never know what the password policy of a site/company will be. So it has never been a issue.

    IF ou wnat unique passwords for each site why not havea normal password say

    Test123 followed by the site name so iisnet

    So your password would be Test123iisnet

    Enough people aren't complaining as there is like wrong that is the point. Anyway enough feeding.....

Page 1 of 2 (17 items) 1 2 Next >
Microsoft Communities