Password cracking in your organization
How do you know your users aren’t using easy to guess passwords? You rely on your Operating system/Active Directory password complexity requirements. You force users to create passwords with Upper case, lower case, number and maybe even a special characters. You can even make the minimum number of characters be 8 or 9 or even more.
This is not enough. Look at this password, you may even have used it:
ZAQ!1qaz
This password complies with all the requirements
SANS Mentor Training in Austin TX
On April 6, 2010, I will be mentoring SEC560 Penetration Testing and Ethical Hacking in Austin TX.
See link for details and sign up!
If you click on the ad at the bottom right of the site, you can help me out with a referral to the training. 
http://www.sans.org/mentor/details.php?nid=21188
