Meeting the InCommon Assurance profile criteria using Active Directory

[David Walker <>]

Here are a couple of articles to keep us all scared about passwords.  Probably no direct impact on our work, although the fact that passwords like qeadzcwrsfxv1331 can be cracked when weak encryption is employed might have bearing on our decision of whether entropy is a mitigation for weak encryption.

• Anatomy of a hack: How crackers ransack passwords like “qeadzcwrsfxv1331” - http://arstechnica.com/security/2013/05/how-crackers-make-minced-meat-out-of-your-passwords/
• Those meters that rate password strength work, until they don't - http://gcn.com/blogs/cybereye/2013/06/password-strength-meters-dont-always-work.aspx?s=gcntech_120613and

David