News for hackers. Stuff that matters.

A comment on Defending Against Hackers Took a Back Seat at Yahoo, Insiders Say. Parent comment

Re:Defending Against Hackers Took a Back Seat at Yahoo, Insi... by OedipusRex on Wednesday September 28, 2016 @10:20AM (#12597797)
Who would enforce it on any website? The US government, or W3C, or IANA? Everyone talks about a free and open web and no one wants someone poking around behind the scenes. I don't trust anyone to enforce password rules for fear of exploitation. The user is responsible for their password security and it should stop there.

That being said, Yahoo should have force reset passwords.

[ Parent | on HN ]
Re:Defending Against Hackers Took a Back Seat at Yahoo, Insi... by bkjsbkjdnf on Wednesday September 28, 2016 @01:32PM (#12599564)
> The user is responsible for their password security and it should stop there.

That would be true if the user created, stored, authenticated the password himself.

[ Parent | on HN ]