Re: Dirty Word Filter

[Adam Glauser <adamglauser@xxxxxxxxxxxx>]

From RPG400-L ... thread drifted to security practices.

Lim Hock-Chai wrote:
> I don't see the point of filtering Dirty word in password.  Shouldn't it
> be a private thing.  Nobody else should be able to see it and nobody
> else should know it but the owner.

The only reason I could think of was that it reduces your vulnerability 
to dictionary attacks.  That said, is it really worth the effort to 
focus on "dirty" words?  To my mind, if you restrict "dirty" words, may 
as well restrict all dictionary words.  Not only that, but there are 
other ways to protect against dictionary attacks anyway (such as varying 
off devices after some number of unsuccessful authentication attempts).