4 ms·
The guy who first recommended rotation "has since come out and apologized about the first iteration of the NIST guidelines"[1] Password rotation has always bee
by artful-hacker 5y ago
The guy who first recommended rotation "has since come out and apologized about the first iteration of the NIST guidelines"[1]
Password rotation has always been a bad idea.
https://labs.bishopfox.com/industry-blog/2018/08/password-security-the-good-the-bad-and-the-never-should-have-happened https://labs.bishopfox.com/industry-blog/2018/08/password-se...
- user3939382 5y agoTo clarify, he was apologizing for everything in those obsolete guidelines including the complexity requirements. Apparently DHS didn't get the memo: https://studyinthestates.dhs.gov/sevis-help-hub/sevis-basics/system-access-and-security/sevis-passwords#h685 https://studyinthestates.dhs.gov/sevis-help-hub/sevis-basics...