ST Alpha - "We never changes our passwords. I check all passwords against compromised lists and require changes when one appears. Frequent password changes are " (Reading a Post)

SlickerTalk
Search Archives
The Leaderboard
The FAQ

Down to Post

Backboards:

Posts: 157

In response to "We have to change our passwords monthly -- nm" by Dano

We never changes our passwords. I check all passwords against compromised lists and require changes when one appears. Frequent password changes are

Posted by oblique (aka kkuphal) Aug 6 '21, 05:43

no longer recommended by various security agencies

Responses:

Frequent mandated changes are a good way to make me list my passwords where they're more likely to get scraped. - Max Aug 6, 07:48
I assume that requiring frequent password changes promotes the use of easily hackable patterns. -- nm - Dano Aug 6, 06:05 9
- *increments his previous password by 1* -- nm - znufrii Aug 6, 06:28
- Yes and also writing down passwords and sticking them to your monitor :) -- nm - oblique Aug 6, 06:08 7
  - All these methods fail if a hacker with eidetic memory poses as a delivery guy and walks through the offices memorizing passwords as people type them -- nm - decline Aug 6, 06:12 5
    - Heh....seen a few security webinars where this sort of scenario is shown. We can use digital stickies but no physical stickies. -- nm - Walt_Disney Aug 6, 06:15
    - Who lets the delivery person into the secure access area?! -- nm - ty97 Aug 6, 06:14 3
      - All you need to get in most buildings is a clipboard and a confident wawve -- nm - oblique Aug 6, 06:21 2
        
        don't forget the orange reflective vest. -- nm - Reagen Aug 6, 06:46
        
        seen that same scenario in our security webinars also. If you look like your belong and are confident, you can get so many places -- nm - Walt_Disney Aug 6, 06:37
  - Just put it under your keyboard instead, no one will ever think to look there -- nm - ty97 Aug 6, 06:09
I have seen a couple of e-mails about having passwordless access in the future and using PIN or biometric access. -- nm - Walt_Disney Aug 6, 05:58 2
- Yeah. We require two factor for any access off our own computers or network -- nm - oblique Aug 6, 06:01 1
  - We have two factor on top of our two factor on top of another two factor. -- (edited) - Inigo Aug 6, 06:12
yeah, we stopped forcing password changes awhile back -- nm - decline Aug 6, 05:56
I wish we'd move to something like this. Get everyone to xkcd-like passwords and let them stay there. -- (edited) - Inigo Aug 6, 05:55 1
- correct. horse battery staple -- nm - oblique Aug 6, 06:22

Post a message top

We never changes our passwords. I check all passwords against compromised lists and require changes when one appears. Frequent password changes are

Replies are disabled on threads older than 7 days.