News for hackers. Stuff that matters.
Re:New NIST password guidelines: don't require character typ... by Spooky23 on Wednesday December 14, 2016 @07:37AM (#13175504)
In one large, diverse environment I'm familiar with, that policy spiked the need for intervention (password resets, unlocks, etc).

That spikes costs. Many users (mobile) need to call someone, which is $$$.

Those interventions also lead to things like figuring out what app stored password is relocking the account. That kind of exercise could cost a few hundred bucks.

...all for zero benefit.

There are no comments on this comment yet.