一件让我彻底无语的事情

以下引用scegg在2006-1-19 10:16:19的发言：
还是用强密码要求好了（企业版的某人）
1 密码必须长于6位
2 密码必须使用英文大写、小写、数字、其它字符中的至少3项
3 密码最长保留42天。
4 新设置的密码不得与前5次密码重复。
5 密码最短保留2天。

以下引用Prz在2006-1-19 13:07:57的发言：


并且还要加入账户锁定策略: 8次无效登陆锁定30分钟

不过密码期限和账户锁定统统和Admin帐号无关... -_-||| 因为系统不能够在任何时候进入完全自锁状态，所以Admin帐号被暴力破解的可能性最大...

所以最王道的办法还是重命名Admin帐号，并且设定一个至少12个字符、而且不要含有有意义的单词的密码。

以下引用Rinrin在2006-1-20 11:12:55的发言：

咳
把那个账户删了

以下引用Prz在2006-1-20 16:16:58的发言：


你删得掉我认你做老大... -_-|||

以下引用Prz在2006-1-19 13:07:57的发言：
所以最王道的办法还是重命名Admin帐号...

You will find many resources that recommend renaming the account and then creating a honey-pot account called Administrator to lure attackers. No attacker worth his salt will be fooled by those tactics. The RID for the account is always 500. There are abundant tools that can find the real account. Besides, don’t you have enough to do securing your network without building things that people should be breaking into? Your time will be better spent on network security.

True, there are worms that go after the account named Administrator, but if you have followed the advice here, they will not be a threat. Some people argue that renaming the account has intrusion detection value in that if you see people go after the real Administrator account in your intrusion detection logs you know you are after an attacker who knows something. However, it is just as likely that you are after an attacker who merely knows how to download and run automated attack tools off the Internet.

以下引用Prz在2006-1-20 16:16:58的发言：
你删得掉我认你做老大... -_-|||

以下引用闇雨の绝在2006-1-19 13:34:08的发言：
建议拔掉网线，切断所有物理接触～