<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Running from the truth</title>
	<atom:link href="http://newschoolsecurity.com/2009/07/running-from-the-truth/feed/" rel="self" type="application/rss+xml" />
	<link>http://newschoolsecurity.com/2009/07/running-from-the-truth/</link>
	<description>The Blog Inspired By The Book</description>
	<lastBuildDate>Tue, 07 Feb 2012 02:09:16 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: Frank Sunder</title>
		<link>http://newschoolsecurity.com/2009/07/running-from-the-truth/#comment-191</link>
		<dc:creator>Frank Sunder</dc:creator>
		<pubDate>Thu, 09 Jul 2009 16:17:44 +0000</pubDate>
		<guid isPermaLink="false">http://newschoolsecurity.com/?p=345#comment-191</guid>
		<description>This is interesting. I&#039;ve often wondered about password complexity rules. Do we have any reason to impose them when there&#039;s no offline attack?   On probably the  most basic thing in security if there&#039;s a good reason to annoy users with complexity rules we haven&#039;t done a good job of explaining it.</description>
		<content:encoded><![CDATA[<p>This is interesting. I&#8217;ve often wondered about password complexity rules. Do we have any reason to impose them when there&#8217;s no offline attack?   On probably the  most basic thing in security if there&#8217;s a good reason to annoy users with complexity rules we haven&#8217;t done a good job of explaining it.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

