4 ms·
It's a good policy, but I don't think it would work well as something _forced_ on users.
by ben0x539 5y ago
It's a good policy, but I don't think it would work well as something _forced_ on users.
- edoceo 5y agoOh yes, like Novell default policy to change password every 90 days. So many help desk calls.
- whoknowswhat11 5y agoGovt still has that - help desk calls galore. Good / bad news - they usually make phone call password reset easy (given volume) - sometimes you can just give your username and get a new password (we can ignore the security risks in that process).
- Spooky23 5y agoLocal governments that handle data from the IRS (child support units in counties are one example) have to meet IRS 1075 requirements. A few years ago, that included complex passwords that lock in 3 wrong attempts among other things. Worst part is that the rules tend to infect other parts of the business if people do stuff incorrectly.
- whoknowswhat11 5y agoNo kidding. The lockout rate (which leads to shared passwords so people can work) etc gets crazy with these systems.
- xbar 5y agoIt's good to prompt them.