3 ms·
I enjoyed the article. It inspired me to participate. However, the Iversoft challenge site has a stupid password policy. Password policies are basically the sam
by fapjacks 10y ago
I enjoyed the article. It inspired me to participate. However, the Iversoft challenge site has a stupid password policy. Password policies are basically the same thing as just storing them locally in plaintext. Requiring people to perform password gymnastics is the most surefire way to get them to write it down.
- robotdan 10y agoThere is probably some truth to this, but I don't know the answer is to allow weak passwords. Every company I've ever worked for enforced some sort of minimum password requirements. What I do find to be a PITA is when you attempt to create a password that does not meet the minimum rules and the error message gives you no indication of what you need to change to meet the requirement.
- newman314 10y agoWell, the first 3 are ok other than increasing the password length. Next, they really should be using ed25519 keys if possible. Better, faster and all that good stuff.
- mavhc 10y agoIs writing down your password a bad thing? Reduces the attack surface from 510.1 million km² to 5 m²