From: Peter Hickman Date: 2010-08-25T00:24:35+09:00 Subject: Re: If input contains.... On 24 August 2010 15:52, Jean-Julien Fleck wrote: > @Peter: how do you remember the couple login/password that are > randomly chosen ? Do you store them somewhere ? The really insane ones are used to access accounts or services programatically - so they are stored as part of the application that accesses the service. These machines (the command and control servers) are inside our company and protected but they have to store the username / password as plain text. On the other end, at the hosting companies we use, the username is in plain text but the password is encrypted. The firewalls at both ends limit which machines can even access the services and tools look for abuse (such as deny hosts) and we use ssh where we can, so it's pretty secure. However if anyone was to break into our office in the middle of the night and gain access to the command and control servers then all bets are off :( My personal limit for remembering a long password is around 16 characters, but I have to use it frequently.