Some ways around the problem
•
Better passwords
–
longer
–
larger character set
–
more random in nature/encrypted
•
Used less often
–
changed frequently, one system per password
–
challenge/response – use only once (p. 599)