Illegal Logins / Failed Login Notification notification

[sgoti]

Heh-

I feel like the last kid picked for kickball, I haven't got one yet.

However, I did get an illegal login notice back on February 9, so maybe I should be thankful it's not my account sending messages about surplus tanks and such.

[Kevin WS]

Recent research regarding passwords has shown that a phase or sentence is far stonger then one of those upper case lower case letter symbol number mixtures.

Its the length that actually improves the security.....

[Revell-Fan]

There is a place in Wales called Llanfairpwllgwyngyllgogerychwyrndrobwllllantysilio gogogoch...

THEY KNOW HOW TO DO IT!!!

[Kevin WS]

That's perfect!

PS You missed an "l" I think!

[murphyaa]

I'd hate to sign up for anything being from that town:

City born in: see back of paper

[zubie]

Amazing how quickly this thread has grown. I used to teach a course on Inet practices, and used to suggest that a good way to create a password that you will remember are by using mnemonics or rebus-like effects.

An example (although bad because it is too common and too short) is CUL8R. The phrase ideally doesn't mean anything in particular, such as "One Freighter At Noon" or "1fr8r@12". Add punctuation to break it into logical break points such an old phone number no longer connected to you such as (another bad example) PENN.6.5K. Phone number passwords are good in that you can leave them on your desk in plain sight along with all the other odd phone numbers on a desk. Actually taking advantage of the numeric aspect of the phone keys does allow you to leave passwords in relatively plain sight at least as reminders (just don't make it obvious like writing - my visa - username (914) 555 -3455 on a piece of paper in your wallet)

As far as I know, pretty much all password services accept "." but not all accept #,@,&, or _, but if it's allowed it they can be handy for these cryptic numbers and phrases because of the additional meanings, @ is "at" or "a", or # is pound or number or hash, or expletive and so forth.

On the whole, it doesn't pay to make it so hard you can't remember it. It is mostly a question of size and variability - also importance. Your bank pw should be really hard and different from all the other ones...your forum one...well, what does admin say (I mean if you are on a lot of forums, are you going to come up with a different one for each?)

p.s. FYI, Needless to say, by my very writing of these examples, all of the literal examples given above have been rendered worthless as passwords

[Scooter]

I got the notice today from the system here. I logged in just to make sure. Makes me wonder why anyone in china would want to crack this kind of group. Don't they have enough of their own paper models?

[herky]

Originally Posted by Revell-Fan

There is a place in Wales called Llanfairpwllgwyngyllgogerychwyrndrobwllllantysilio gogogoch...

THEY KNOW HOW TO DO IT!!!

been there.takes ages to read the sign on railway station as you go through

[gregh]

I too received notice today(first time ever) of 5 or more login attempts. I thank our webmasters for providing the information.
I traced the IP given to a datacenter in Provo Utah, contacted them. They replied and gave additional info the IP was used out of a company called VLAN24 in the LosAngeles, CA area. They also mentioned i may get a request for more info from the LA company.

[southwestforests]

Guess to be on the safe side, will change my password anyway since I can't remember how long it has been in use.
But then again, some computer programs can probably crack one password just as well as the next.