HackedThat: Breaking in to a hardened server via the back door

Re:HackedThat: Breaking in to a hardened server via the back... by robotdan on Thursday August 25, 2016 @06:31PM (#12363006)

There is probably some truth to this, but I don't know the answer is to allow weak passwords. Every company I've ever worked for enforced some sort of minimum password requirements.

What I do find to be a PITA is when you attempt to create a password that does not meet the minimum rules and the error message gives you no indication of what you need to change to meet the requirement.

[ Parent | on HN ]

Re:HackedThat: Breaking in to a hardened server via the back... by rocqua on Thursday August 25, 2016 @06:40PM (#12363052)

Sure, block the stupidly weak passwords.

But don't block a 6 word diceware phrase because it has not numbers (or because it is to long.... looking at you PAYPAL).

Meanwhile, I'd venture that P@ssword1 meets their requirements...

[ Parent | on HN ]

Re:HackedThat: Breaking in to a hardened server via the back... by robotdan on Thursday August 25, 2016 @09:16PM (#12363702)

fair point.

[ Parent | on HN ]