Today I forgot the password for a site I use only occasionally. This is rare, as I have a number of password schemes that I use to create a password unique to each site. After clicking the reset password link, I am confronted with the “password strength checker” below:

This list of rules doesn’t fit very well with my password scheme, primarily because what I computed in my head fails the test for uppercase characters.

Using the phrase “this is an unbelievably long password that would take a very long time to crack” fails this rule too, as well as the tests for a number and punctuation. I’m not suggesting that this is a good password, but it’s certainly better than “aA1!bcde” which passes all the rules. These 8 characters are trivial to brute force on any modern machine even if the underlying software uses a salted hash.

The offending software appears to be Jive, who perhaps need to set some more sensible defaults on their login system.

After a number of unsuccessful attempts to get dban on a USB stick using unetbootin, I found the Universal USB Installer instead. This appears to do a better job, making a bootable installation from the latest preview build of dban.

It helps to remove the USB stick after boot, during the “Waiting for USB devices to register” stage. This is an issue with how dban recognises mass storage on some motherboards, rather than a problem with the USB boot. Unfortunately it doesn’t work properly in WINE right now, presumably because it can’t find the right drives.

Further instructions are available on the pendrivelinux.com homepage, but it is simple enough that you wont need them.