Banned password list

[Bill Fuller]

We would like to include a banned password list for C# authentication, but
cannot seem to locate one. Does anyone know of a site/location where a list
of common passwords can be found?

 

[Peter Bromberg [C# MVP]]

I am not sure that such a valid list exists, or that it would be of much
value if it does.
What would probably be more valuable from a security standpoint would be to
enforce a password policy.

"C# Authentication" is a very general term; it does not describe anything
about what the actual authentication provider is or how it works.
-- Peter
Site: http://www.eggheadcafe.com
UnBlog: http://petesbloggerama.blogspot.com
MetaFinder: http://www.blogmetafinder.com

 

[Joe Withawk]

We would like to include a banned password list for C# authentication, but

cannot seem to locate one. Does anyone know of a site/location where a
list of common passwords can be found?

I would suggest finding a dictionary password cracker and taking its
dictionary. In a way passwords stored in such a dictionary are surely not
good.
Such dictionaries are often an ordinary dictionary of some language along
with common passwords such as 12345678 etc.

 

[Mike]

A list like this doesn't exist (or at least to non hackers). What you could
do is create your own banned pwd list for your company. Most organizations
has something in place were certain passwords can't be used and has a format
that passwords need to be in, such as number-letter-and one upper case
letter. Your best bet would create your own 'banned password' list.

 

[Blip]

A list like this doesn't exist (or at least to non hackers). What you could
do is create your own banned pwd list for your company. Most organizations
has something in place were certain passwords can't be used and has a format
that passwords need to be in, such as number-letter-and one upper case
letter. Your best bet would create your own 'banned password' list.

Actually, these password lists (dictionaries) are all over the place.
They com w/ password crackers like Jon the Ripper, and there are
several sites that archive large collections of password lists sorted
by things like country, sport, movies, cars, whatever. The best of
these IMHO is http://www.theargon.com/. Have fun...

Blip