Banned password list

Collapse
This topic is closed.
X
X
 
  • Time
  • Show
Clear All
new posts
  • Bill Fuller

    #1

    Banned password list

    We would like to include a banned password list for C# authentication, but
    cannot seem to locate one. Does anyone know of a site/location where a list
    of common passwords can be found?


  • =?Utf-8?B?UGV0ZXIgQnJvbWJlcmcgW0MjIE1WUF0=?=

    #2
    RE: Banned password list

    I am not sure that such a valid list exists, or that it would be of much
    value if it does.
    What would probably be more valuable from a security standpoint would be to
    enforce a password policy.

    "C# Authentication" is a very general term; it does not describe anything
    about what the actual authentication provider is or how it works.
    -- Peter
    Site: http://www.eggheadcafe.com
    UnBlog: http://petesbloggerama.blogspot.com
    MetaFinder: http://www.blogmetafinder.com


    "Bill Fuller" wrote:
    We would like to include a banned password list for C# authentication, but
    cannot seem to locate one. Does anyone know of a site/location where a list
    of common passwords can be found?
    >
    >
    >

    Comment

    • Joe Withawk

      #3
      Re: Banned password list

      We would like to include a banned password list for C# authentication, but
      cannot seem to locate one. Does anyone know of a site/location where a
      list of common passwords can be found?
      I would suggest finding a dictionary password cracker and taking its
      dictionary. In a way passwords stored in such a dictionary are surely not
      good.
      Such dictionaries are often an ordinary dictionary of some language along
      with common passwords such as 12345678 etc.

      Comment

      • Mike

        #4
        Re: Banned password list

        A list like this doesn't exist (or at least to non hackers). What you could
        do is create your own banned pwd list for your company. Most organizations
        has something in place were certain passwords can't be used and has a format
        that passwords need to be in, such as number-letter-and one upper case
        letter. Your best bet would create your own 'banned password' list.





        "Bill Fuller" <someone@nospam .comwrote in message
        news:eus$wvBTIH A.4656@TK2MSFTN GP03.phx.gbl...
        We would like to include a banned password list for C# authentication, but
        cannot seem to locate one. Does anyone know of a site/location where a
        list of common passwords can be found?
        >

        Comment

        • Blip

          #5
          Re: Banned password list

          On Wed, 2 Jan 2008 15:22:37 -0500, "Mike" <igotyourdotnet @gmail.com>
          wrote:
          >A list like this doesn't exist (or at least to non hackers). What you could
          >do is create your own banned pwd list for your company. Most organizations
          >has something in place were certain passwords can't be used and has a format
          >that passwords need to be in, such as number-letter-and one upper case
          >letter. Your best bet would create your own 'banned password' list.
          >
          >
          >
          >
          >
          >"Bill Fuller" <someone@nospam .comwrote in message
          >news:eus$wvBTI HA.4656@TK2MSFT NGP03.phx.gbl.. .
          >We would like to include a banned password list for C# authentication, but
          >cannot seem to locate one. Does anyone know of a site/location where a
          >list of common passwords can be found?
          >>
          >
          Actually, these password lists (dictionaries) are all over the place.
          They com w/ password crackers like Jon the Ripper, and there are
          several sites that archive large collections of password lists sorted
          by things like country, sport, movies, cars, whatever. The best of
          these IMHO is http://www.theargon.com/. Have fun...

          Blip

          Comment

          Working...