[Dshield] password security

[David Brodbeck]

Personally, I favor putting the password file on an encrypted  
filesystem, or encrypting it with GPG or a similar tool.  This way I  
can pick one secure passphrase to remember instead of having to  
remember several.  There are ways for an attacker to get around this,  
too, of course, but for me it lowers the risk to an acceptable level.


On Feb 5, 2009, at 1:24 PM, Dr. Daniel Carras wrote:

> Understanding (even
> briefly) how code is written and what they look for, you can create a
> password file on your system, that would not ordinarily be looked for.
> It here you place your rarely used password. You may also wish to look
> into the history of camouflage. This is what you want to do on your
> system, create a camouflaged password file that hackers will not see.