Monday, December 01, 2008

Governmental Stuff

As a licensed Captain, one of the NEW things that I have to do to operate legally as a 'captain for hire' is to get a new Transportation Workers Identification Credential (TWIC). I'm currently in the process of applying for the right to apply for the card.

The first thing I have to do is create an online identity for the government. I can put in my desired name and password. Here's their regulations pertaining to the password that I can pick:

Password Rules:
Minimum password length is eight characters.
Passwords must contain at least one of each of the following: one alphabetic uppercase, one alphabetic lowercase, one numeric, and one special character.
Passwords shall not contain any two identical consecutive characters (example: 22apples, 14588904).
Passwords may contain no more than two identical consecutive characters in any position from the previous password.
Passwords shall not contain any dictionary word.
Passwords shall not contain any proper noun or the name of any person, pet, child, or fictional character.
Passwords shall not contain any employee serial number, Social Security number, birth date, phone number, or any information that could be readily guessed about the creator of the password.
Passwords shall not contain any simple pattern of letters or numbers, such as “qwerty” or “xyz123”.
Passwords shall not be any word, noun, or name spelled backwards or appended with a single digit or with a two-digit “year” string, such as 98xyz123.
Pass phrases, if used in addition to or instead of passwords, should follow these same guidelines.
Passwords shall not be the same as the User ID.
Password length will be selected to provide a level of protection commensurate to the value or sensitivity of the resources or data it protects, but not less than eight characters.


Is this government just out-of-hand or what?

3 comments:

David said...

What a hassle, 1password or sxipper both will do this automatically and keep a record in your browser window.

Anonymous said...

Too funny. Go to all those lengths to use a password that no one can guess and is so meaningless that it must be written down or stored electronically, instead of stored in your head, where no one could find it.

Anonymous said...

This is a matter of National security!!! Can you imagine what might happen if Muslim extremists got ahold of your password G-Dubs? Shhh...they're probably trying to figure it out right now.....

PitSteve