3 ms·
I’ve had very expensive pen testers tell me to do this as recently as last year. They folded instantly at the first sign of pushback, so it seemed to me somethi
by JimDabell 2y ago
I’ve had very expensive pen testers tell me to do this as recently as last year. They folded instantly at the first sign of pushback, so it seemed to me something that had been sitting in a checklist for years without anybody questioning it, making every website and app they audited worse.
- pksebben 2y agoThat's awful. It's such a security antipattern, obvious as soon as you take into account, you know, _Humans_... Site: Please make a password Human: 7#hs&_suiE2KcS0 Site: No copy and pasting Human: mydogisagoodboy123 Site: Needs special characters Human: Pa$$w0rd12345 Site: Looks great thanks
- bguebert 2y agoIts like those policies where the password needs to change every 60 days that was found to actually reduce security because of the count-up-by-one passwords people would use. For places where that's been a rule forever it is really get it removed.