Security Myths and Passwords(This is an updated version of a contribution I made to the Educause security mailing list last week.) In the practice of security we have accumulated a number of “rules of thumb” that many people accept without careful consideration. Some of these get included in policies, and thus may get propagated to environments they were not meant to address. It is also the case that as technology changes,
