News for hackers. Stuff that matters.

A comment on New NIST password guidelines: don't require character types or rotation. Parent comment

Re:New NIST password guidelines: don't require character typ... by viggity on Wednesday December 14, 2016 @09:47AM (#13176286)
I worked for a State government about 10 years ago. Some asshole managed to lock every single user's account by having a script attempt a login with an invalid password 10 times. Nobody could work for ~7 hours.
[ Parent | on HN ]
Re:New NIST password guidelines: don't require character typ... by jessaustin on Wednesday December 14, 2016 @01:15PM (#13178235)
s/asshole/volunteer pentester/
[ Parent | on HN ]