I’m fairly convinced that there are contractors making money peddling the same stupid ideas to IT staff everywhere, leading to common solutions no matter the me

I’m fairly convinced that there are contractors making money peddling the same stupid ideas to IT staff everywhere, leading to common solutions no matter the merits. It seems every site I use has now sent me that dreaded E-mail, boasting how everything has been “improved” with new “security” measures; meanwhile, every last one of their changes has been not just ineffective but usually provably detrimental to security. You forgot to mention the kicker: after hurling 14 different password requirements at you, they let you reset your password only by answering “security” questions which are usually fixed and not even applicable. Seriously, some of the questions are so ridiculous, I have seen fixed lists where NONE of the questions applies to me. Which is OK because it’s insecure to answer truthfully anyway; I end up creating keychain items just to store the answers to my “security” questions.