6 ms·
I swear one day we will see. "Unfortunately time and again we have come to observe the inability of employees to follow simple rules during password creation.
by its_so_on 14y ago
I swear one day we will see.
"Unfortunately time and again we have come to observe the inability of employees to follow simple rules during password creation. For example, despite our warnings, employees often create a password containing more than one consecutive non-numeral; other employees attempt to createa a password consisting only of numbers, only of letters, or an insecure mix of numbers and letters - e.g. 5:1 - with no special characters.
This is unacceptable.
Henceforth, new passwords must be one of the following five possibilities, as described below:
s$sVC!{IV{wG:|9 (Employees with last name beginning with A-F)
bE#40,$&T@V}266 (Employees with last name beginning with G-L)
U>~7nw*,55{][%H (Employees with last name beginning with M-R)
EL8$v{4#L8482 5 (Employees with last name beginning with S-X)
or
1^_4s"x&T3pB,%% (All other employees).
You may not use a password you have ever used previously. In two weeks, the new possibilities will be posted to the web site, and you must change your password immediately to one of the new possibilities.
You have brought this on yourselves, and if you begin to show an ability to use secure passwords, you may get to pick your own in the future. Until then, they will be assigned to you.
HR."
- dekz 14y ago> The password must be exactly 8 characters long. This is probably the root cause of bad passwords. In the case of Average Joe, he is now having to choose something memorable which is 8 characters long. 'PassworD'
- Terretta 14y agoSorry, "PassworD" doesn't validate. You're missing a symbol, and you have a character repeated. Try "P@s5w0rd" instead. Or, better yet, "abc#1234" as suggested in the examples.
- dekz 14y agoWe've moved on to a fictitious setup. I was so disgusted with my bank and their password policies and authentication measures. They too restrict to 8 characters, but they happen to also offer a SecurID token. This token can be used in conjunction with the initial authentication. I would happily switch to any bank where I can know my data is secure. How do we trust them?
- X-Istence 14y agoI have a student loan that is limited to 8 character passwords. Thing is, when you go to set your password the first time it will happily take the password and use it, good luck getting in though because the next time you go to enter your password the web form truncates it for you (using JavaScript upon submitting)! Then when you go to reset your password they keep telling you that your password doesn't meet the requirements (the form allows you to type as much as you want) but doesn't tell you about the 8 character password rule. Then when you finally get one that works and you are logged in (12345678 is not a secure password, but apparently that is fine) you go to change your password and this time they will tell you that 8 characters are all that is allowed, but the web form is set to only accept 7 characters, so you have to use the Safari Inspector to change the form to accept 8 characters and submit. And unfortunately I can't leave them because it is a loan and not just a checking account. Thing is, even I don't know my password anymore, so it is as secure as it can be :P
- creativeembassy 14y agoI had this problem with Windows 8 and creating a Microsoft Account. When creating the account, they had a hard limit of something like 15 characters. (My passwords are pretty long.) Which got automatically truncated. So when I rebooted my computer running Windows 8 Preview, I couldn't log in with the password I had used, until I figured out that I should only type the first 15 characters of it. Terrible web form design.
- codeodor 14y ago> And unfortunately I can't leave them because it is a loan and not just a checking account. You may be able to refinance the loan through another bank, which would pay off this one and let you go with someone more reasonable.
- X-Istence 14y agoIf I could get the same interest rate or lower I would do it, but as of right now I would get lucky if I could find one that gave me 3x the interest let alone higher...
- jebblue 14y agoI agree that 8 isn't enough: http://www.linuxjournal.com/content/hack-and-password-cracking-gpus-part-i-setup http://www.linuxjournal.com/content/hack-and-password-cracki... http://www.linuxjournal.com/content/hack-and-password-cracking-gpus-part-ii-get-cracking http://www.linuxjournal.com/content/hack-and-password-cracki...
- lloeki 14y agoBeing curious, how many password forms would actually munch up 8 Kanji happily?
- cloverich 14y agomoreover, at 8 characters, it doesn't really matter what password they choose; 8 characters is simply too short to matter. Even 9 or 10 is a significant improvement at this level.