At least eight characters long, and the longer the better. Passwords shorter than 8 characters are easy to crack. Follow these password rules. Avoid common words and proper names. Use both uppercase and lowercase letters, numbers, and symbols. Trouble is, who can remember a password like Fm79$#Xk? Try a passphrase instead: When I was 7, my dog Dolly went to Heaven. This contains 42 easy-to-remember characters, follows all the rules, and is in plain English. (Not every system will accept passphrases; when in doubt, try it out.) The odds against anyone cracking it even with the help of a supercomputer are astronomical. Make your passphrase original. Don't use familiar or famous quotations. Don't use any real names especially your own, your family members, or your pets. Nonsensical passphrases are the hardest to crack.
Reference: www.sans.org
Friday, December 21, 2007
Thursday, December 20, 2007
PRESIDENT
Nixon: Watergate
Clinton: Waterbed
The President`s biggest fear....
Nixon: The Cold War
Clinton: The Cold Sore
Complaints toward the President.....
Nixon: Carpet-Bombing
Clinton: Carpet-Burns
Their Vice-Presidents...
Nixon: His was Greek
Clinton: His is a Geek
Presidential qualities.....
Nixon: Couldn`t stop Kissinger
Clinton: Couldn`t stop kissing her
Things the President couldn`t explain....
Nixon: The missing 18-minutes on the tapes
Clinton: The 36D bra in his briefcase
Presidential Nicknames....
Nixon: Tricky Dick
Clinton: Slick Willy
and finally, Presidential excuses....
Nixon: I am not a crook
Clinton: I didn`t get in her nook
Clinton: Waterbed
The President`s biggest fear....
Nixon: The Cold War
Clinton: The Cold Sore
Complaints toward the President.....
Nixon: Carpet-Bombing
Clinton: Carpet-Burns
Their Vice-Presidents...
Nixon: His was Greek
Clinton: His is a Geek
Presidential qualities.....
Nixon: Couldn`t stop Kissinger
Clinton: Couldn`t stop kissing her
Things the President couldn`t explain....
Nixon: The missing 18-minutes on the tapes
Clinton: The 36D bra in his briefcase
Presidential Nicknames....
Nixon: Tricky Dick
Clinton: Slick Willy
and finally, Presidential excuses....
Nixon: I am not a crook
Clinton: I didn`t get in her nook
Wednesday, December 19, 2007
SIZE ???
`In the xxx store, have one Man want to buy condom, but he confused`.
Salesgirl: `May I help you sir??`
Man: `I would like to buy condom, but i din`t know about this thing??`
Salesgirl: `Ok, May I hold your penis for size?`
Man answer: `sure`.
Salesgirl: `give him a `M`!`, said Salesgirl to her assistant. `Wait, give him `L`! Wait, give him `XL`! Oh shit! Give me a tissue.`
Salesgirl: `May I help you sir??`
Man: `I would like to buy condom, but i din`t know about this thing??`
Salesgirl: `Ok, May I hold your penis for size?`
Man answer: `sure`.
Salesgirl: `give him a `M`!`, said Salesgirl to her assistant. `Wait, give him `L`! Wait, give him `XL`! Oh shit! Give me a tissue.`
Tuesday, December 18, 2007
How to generate Dormant User ID Report for Windows?
Windows Active Directory Dormant ID Review
Some of you maybe as security administrator know and have the same experience that we should do dormant id review every month to maintenance our system and to ensure that our system is clean from dormant ID as recommended by IT auditor.
Usually, I have generated the report using DumpSec to produce windows ID report (truelastlogon) and review it whether any user id that never login below to 90 days (base on company policy) or over 90 days.
How can we easily review if we have thousand user id and several companies separately by organization unit (OU)?
For this reason, I have made clone DumpSec function (Dump Users as Table) using visual basic script (VBS) to access Windows Active Directory (ADSI) and exported to text file delimited format with tab.
The Advantage:
Please read the header script for more information.
Download script:
http://aarreessuu.googlepages.com/dormant-id-review.vbs
Some of you maybe as security administrator know and have the same experience that we should do dormant id review every month to maintenance our system and to ensure that our system is clean from dormant ID as recommended by IT auditor.
Usually, I have generated the report using DumpSec to produce windows ID report (truelastlogon) and review it whether any user id that never login below to 90 days (base on company policy) or over 90 days.
How can we easily review if we have thousand user id and several companies separately by organization unit (OU)?
For this reason, I have made clone DumpSec function (Dump Users as Table) using visual basic script (VBS) to access Windows Active Directory (ADSI) and exported to text file delimited format with tab.
The Advantage:
- With this script you can generate user list base on OU that you have specified
- If you have limited network connection between primary domain controller and backup domain controller and also you have many backup domain controller, this script will be generate report faster than DumpSec because the script will be collect information from specific domain controller name as your specified on the configuration header within the script.
Please read the header script for more information.
Download script:
http://aarreessuu.googlepages.com/dormant-id-review.vbs
Subscribe to:
Posts (Atom)