0. Password hints, the horror. As a user, the wisest thing is to just put something misleading and use good password hygiene. 1. This reminds me of a funny th

0. Password hints, the horror. As a user, the wisest thing is to just put something misleading and use good password hygiene. 1. This reminds me of a funny thing I did at big name university that shall remain nameless. On the CS network which used NIS, I ran getent passwd as a regular user and received everyone's hashed passwords! Then, I piped that through john the ripper.... Say hello to 50 user's passwords in 30 seconds with nothing more than the standard English dictionary. (In an era just before shmoo, et. al. rainbowtables.). Dept chair, ~20 profs and some students. Drop a cron to start xeyes every 30 minutes anyone? }:)