3 ms·
The problem is how do you know that your password was not leaked or stolen? You don't know and that your brokerage did not ask you - it can mean anything, they
by ozim 5y ago
The problem is how do you know that your password was not leaked or stolen?
You don't know and that your brokerage did not ask you - it can mean anything, they might have had a breach already but they kept it secret.
Idea about rotation of passwords is that you assume that your password 'was leaked/cracked' and you don't know about it and have no way knowing it.
- the_snooze 5y ago>Idea about rotation of passwords is that you assume that your password 'was leaked/cracked' and you don't know about it and have no way knowing it. That's really not the user's responsibility at that point. It's up to the service to store passwords securely (i.e., use proper password hashing functions) and monitor login behavior to throw up extra challenges if things look suspicious. Password rotation is a high-cost measure placed on the user that has little (even negative) benefit, especially when there are more effective alternatives the service is better-positioned to implement. Users cannot twist themselves into knots to make up for shitty service-side design decisions.
- ozim 5y agoWhen I have right of way on the crossroads and I see truck coming with high speed from the side I am not going to drive in front of it and then claim, it was his responsibility to stop because I had "right of way". It is also no use when I am dead or severely wounded or all my money from account gone.