3rd May 2010 6:23 pm
- First of all, check for a list of well-known easy to break passwords to foil a dictionary attack, and reject it if it’s there.
- Then check that it’s at least 8 characters, and reject it if it’s not.
- Then implement a counter to measure how secure it is by various checks.
- Then add to the rating if it’s more than 12 characters.
- Add to the rating if it contains lowercase letters.
- Add to the rating if it contains uppercase letters.
- Add to the rating if it contains numbers.
- Add to the rating if it contains nonalphanumeric characters.
- Finally, convert the result to a percentage score and return it as an integer.
The finished article’s available here as a .zip file if you’d like to use it, or just take a look at the code. Be warned, it’s quite long due to the fact that the list of insecure passwords I used had in excess of 3,000 entries in it! It includes a very simple HTML form which will allow you to submit a function and will return a score for it via an alert() dialogue. Feel free to use it if you wish!
3rd May 2010 5:29 pm
Personally I’m more than willing to take up the slack myself by studying independently, but I’m sure there are plenty of people who wouldn’t do so until they reach the workplace. Admittedly, the fundamentals of the language haven’t changed, but there’s plenty of stuff that’s of very little use today that I’ve had to learn when I could be learning something more useful.
So surely these texts are long overdue for a refresh? I would hope that a newer release would cover at least some of the following:
Creating a simple AJAX application.
I really don’t think there’s any excuse for the training materials being that outdated when some of their other CIW training materials are much more current.
3rd May 2010 12:04 am
For a while now I’ve been looking for a good free shell account provider, and the other day I stumbled across the best I’ve ever seen at http://devio.us/. They run OpenBSD, they provide pretty much everything you could want from a shell account provider, and they’ve been very willing to help so far - when I asked if they had plans to add Python support, they added it within 24 hours. If you’re looking for a good shell account provider, I suggest you give them a try.
2nd May 2010 11:57 pm
I’ve made the tough decision to abandon Blogger and move my blog to Wordpress. For those of you that have joined me from my old blog at http://farbeyondtheedgeofreason.blogspot.com/ thank you very much for doing so!
The new blog will have a somewhat different emphasis than my old one. Rather than being a bit of a free-for-all covering Linux, programming, new websites and anything else that I think of, this blog is going to be much more focused, with web development as the main subject. That said, we’ll have to see how things work out.
I’m considering another move in a few months time, with my site at http://matthewdaly.co.uk/ becoming the new location of the blog, but that would require paid hosting, so I’m going to give Wordpress a good try first before I commit to using it.
21st April 2010 3:06 pm
Today I took the exam for my CIW Database Design Specialist course, and I’m pleased to say that I passed with flying colours! I find it hard to believe that I’ve managed to actually accumulate that much information about relational databases, but somehow I did it!