3 ms·
It's going to take literally an entire human generation or more for the terrible password rules of the 2000s to disappear. Forced password changes and the myria
by caymanjim 7y ago
It's going to take literally an entire human generation or more for the terrible password rules of the 2000s to disappear. Forced password changes and the myriad irrational rules about acceptable password contents have been drilled into the heads of every sysadmin and security engineer for the past two decades. They were never evidence-based rules, they were just learned behaviors.
- mormegil 7y agoIf only the heads of security people... It's right there in the law: "[...] the tool for user identity verification [...] must enforce rules for [...] regular password change in the interval of at most 18 months [...]" §19(5)f of the Decree No. 82/2018, the Cybersecurity Decree (the Czech Republic). (The good thing is this is only an interim requirement until a proper two-factor system is implemented, as required.)