<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: j.42dh is online</title>
	<atom:link href="http://cakebaker.42dh.com/2007/02/02/j42dh-is-online/feed/" rel="self" type="application/rss+xml" />
	<link>http://cakebaker.42dh.com/2007/02/02/j42dh-is-online/</link>
	<description>baking cakes with CakePHP</description>
	<lastBuildDate>Wed, 28 Jul 2010 19:06:52 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
	<item>
		<title>By: Dieter@be</title>
		<link>http://cakebaker.42dh.com/2007/02/02/j42dh-is-online/comment-page-1/#comment-4051</link>
		<dc:creator>Dieter@be</dc:creator>
		<pubDate>Sun, 04 Feb 2007 13:24:19 +0000</pubDate>
		<guid isPermaLink="false">http://cakebaker.42dh.com/2007/02/02/j42dh-is-online/#comment-4051</guid>
		<description>I see.. well i guess i have an original nickname as it&#039;s never taken ^^

Concerning passwords, that&#039;s why i recommend using at least 1 number, uppercase character, lowercase character and &quot;special&quot; character (like %).  Password length limitations, if any, are usually: &quot;at least 8 characters&quot;, in very rare cases a max length is specified (12 or so).  So with a password between 8 and 10 or so characters and a mix of types of characters like described above, i never encountered problems :)</description>
		<content:encoded><![CDATA[<p>I see.. well i guess i have an original nickname as it&#8217;s never taken ^^</p>
<p>Concerning passwords, that&#8217;s why i recommend using at least 1 number, uppercase character, lowercase character and &#8220;special&#8221; character (like %).  Password length limitations, if any, are usually: &#8220;at least 8 characters&#8221;, in very rare cases a max length is specified (12 or so).  So with a password between 8 and 10 or so characters and a mix of types of characters like described above, i never encountered problems :)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: cakebaker</title>
		<link>http://cakebaker.42dh.com/2007/02/02/j42dh-is-online/comment-page-1/#comment-4003</link>
		<dc:creator>cakebaker</dc:creator>
		<pubDate>Sat, 03 Feb 2007 18:06:50 +0000</pubDate>
		<guid isPermaLink="false">http://cakebaker.42dh.com/2007/02/02/j42dh-is-online/#comment-4003</guid>
		<description>@Dieter: Thanks for your explanations. 

A very similar approach was used in a company I worked for accessing all servers as administrator. They used the computer name plus a &quot;secret&quot; character sequence. That worked fine in such a controlled environment, but I am a bit skeptical if it will work on the internet, with all the different rules used for user names and passwords. I try to use the same user name everywhere, but that&#039;s just impossible, in some applications my user name is already used, in others it must have a certain minimal length, in others I am forced to use a certain user name... Similar for passwords. With all the exceptions I am back at the original problem ;-)</description>
		<content:encoded><![CDATA[<p>@Dieter: Thanks for your explanations. </p>
<p>A very similar approach was used in a company I worked for accessing all servers as administrator. They used the computer name plus a &#8220;secret&#8221; character sequence. That worked fine in such a controlled environment, but I am a bit skeptical if it will work on the internet, with all the different rules used for user names and passwords. I try to use the same user name everywhere, but that&#8217;s just impossible, in some applications my user name is already used, in others it must have a certain minimal length, in others I am forced to use a certain user name&#8230; Similar for passwords. With all the exceptions I am back at the original problem ;-)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dieter@be</title>
		<link>http://cakebaker.42dh.com/2007/02/02/j42dh-is-online/comment-page-1/#comment-3989</link>
		<dc:creator>Dieter@be</dc:creator>
		<pubDate>Sat, 03 Feb 2007 12:11:20 +0000</pubDate>
		<guid isPermaLink="false">http://cakebaker.42dh.com/2007/02/02/j42dh-is-online/#comment-3989</guid>
		<description>I definitely wouldn&#039;t trust anyone or any service for that.  Maybe only if i could install the program on my own system *and* it&#039;s opensource (like yours :-) ) but even then i rather have everything in my head (a good trick for this below).  I know i&#039;m both a bit paranoid and i&#039;m a controlfreak :p

But here is a tip that gives you a unique password (and username, if you want that) for each service or website (let&#039;s call this &quot;app&quot;) without the need for having to remember all the combinations.
The trick is integrating one or more unique aspects of the app into your password (and possibly username).  For this app this would be for example  cakebaker,42dh.com,42dh or anything based on that (letters in reversed order, only first letter, letters shifted, letters replaced by numbers (leetspeak)...)
Then you just combine that part with a static part, which contains some uppercase+lowercase letters, numbers and preferably at least one other character (like % or !)
This way you can create a deterministic (for each app there is only one possible password) method for &quot;calculating&quot; passwords for an app.

To give a really simple example i could say a password for logging in on this site would be 42dhD13t3r! (first part based on the domain name, second is static, but easily rememberable since it&#039;s my name in leetspeak with an exclamation mark behind it)
You could offcourse improve this example a great deal.  Since quite some passwords are transmitted or even stored in plaintext, you don&#039;t want possible hackers to understand your trick, that would allow them to log into every account you have.  That&#039;s why you shouldn&#039;t just take &quot;42dh&quot; but perform some operations on it, for example taking the first and 3rd character of the domain name, shifting the first 2 to the left and the 3rd 2 to the right, so you would become 2fD13t3r!.  Still not perfect, but you can be creative from here.  another trick is using these 2 characters for replacing characters in the static part (replace all 2&#039;s and f&#039;s by a !, or replace all 2&#039;s by f&#039;s, etc etc)

For username you could use a constant username or do something similar like with passwords, when an app want&#039;s an email adress as account name i usually make it @mydomain.com and just use a catch-all.</description>
		<content:encoded><![CDATA[<p>I definitely wouldn&#8217;t trust anyone or any service for that.  Maybe only if i could install the program on my own system *and* it&#8217;s opensource (like yours :-) ) but even then i rather have everything in my head (a good trick for this below).  I know i&#8217;m both a bit paranoid and i&#8217;m a controlfreak :p</p>
<p>But here is a tip that gives you a unique password (and username, if you want that) for each service or website (let&#8217;s call this &#8220;app&#8221;) without the need for having to remember all the combinations.<br />
The trick is integrating one or more unique aspects of the app into your password (and possibly username).  For this app this would be for example  cakebaker,42dh.com,42dh or anything based on that (letters in reversed order, only first letter, letters shifted, letters replaced by numbers (leetspeak)&#8230;)<br />
Then you just combine that part with a static part, which contains some uppercase+lowercase letters, numbers and preferably at least one other character (like % or !)<br />
This way you can create a deterministic (for each app there is only one possible password) method for &#8220;calculating&#8221; passwords for an app.</p>
<p>To give a really simple example i could say a password for logging in on this site would be 42dhD13t3r! (first part based on the domain name, second is static, but easily rememberable since it&#8217;s my name in leetspeak with an exclamation mark behind it)<br />
You could offcourse improve this example a great deal.  Since quite some passwords are transmitted or even stored in plaintext, you don&#8217;t want possible hackers to understand your trick, that would allow them to log into every account you have.  That&#8217;s why you shouldn&#8217;t just take &#8220;42dh&#8221; but perform some operations on it, for example taking the first and 3rd character of the domain name, shifting the first 2 to the left and the 3rd 2 to the right, so you would become 2fD13t3r!.  Still not perfect, but you can be creative from here.  another trick is using these 2 characters for replacing characters in the static part (replace all 2&#8242;s and f&#8217;s by a !, or replace all 2&#8242;s by f&#8217;s, etc etc)</p>
<p>For username you could use a constant username or do something similar like with passwords, when an app want&#8217;s an email adress as account name i usually make it @mydomain.com and just use a catch-all.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: KesheR</title>
		<link>http://cakebaker.42dh.com/2007/02/02/j42dh-is-online/comment-page-1/#comment-3957</link>
		<dc:creator>KesheR</dc:creator>
		<pubDate>Fri, 02 Feb 2007 21:11:15 +0000</pubDate>
		<guid isPermaLink="false">http://cakebaker.42dh.com/2007/02/02/j42dh-is-online/#comment-3957</guid>
		<description>Everybody will trust you, I think so</description>
		<content:encoded><![CDATA[<p>Everybody will trust you, I think so</p>
]]></content:encoded>
	</item>
</channel>
</rss>
