4 ms·
It's a double sword. The true issue with frequent password change is people really don't want to be creative. They ended up either changing one letter, or addin
by yeukhon 10y ago
It's a double sword. The true issue with frequent password change is people really don't want to be creative. They ended up either changing one letter, or adding an extra letter. At least do a quick distance check and deny password at 90% similarity.
- Retra 10y agoOh, yeah. They'll never just write it down if you do that.
- abstractbeliefs 10y agoIf everyone in the office wrote down their secure password and stored it in a locked desk drawer, that's probably more secure than the entire office using weak passwords. If nothing else, it means the person has to have physical access and be able to pass off rifling through someones desk after breaking it open. While this sort of stuff has happened in on-premise pentests, it's certainly not the normal way to attack when it's done for real.