New NIST password guidelines: don't require character types or rotation

Re:New NIST password guidelines: don't require character typ... by sleavey on Wednesday December 14, 2016 @01:00PM (#13178097)

I've seen banks do this, and I agree it's incredibly annoying. KeePassX's autotype function bypasses copy-and-paste restrictions, since it emulates the keyboard as it types your password.

[ Parent | on HN ]

Re:New NIST password guidelines: don't require character typ... by paulddraper on Thursday December 15, 2016 @01:41AM (#13182897)

Next is custom screen keyboards made with <canvas>

[ Parent | on HN ]

Re:New NIST password guidelines: don't require character typ... by chikei on Thursday December 15, 2016 @07:06AM (#13184011)

You're allow only to input using their custom screen keyboard AND randomize the position of each key.

Banks: this is to prevent attacker use keylogger or mouse position logger.

I was like, are you fucking serious ?

[ Parent | on HN ]

Re:New NIST password guidelines: don't require character typ... by rolandog on Thursday December 15, 2016 @01:40PM (#13186959)

Shh... don't give them any ideas.

[ Parent | on HN ]

Re:New NIST password guidelines: don't require character typ... by nommm-nommm on Wednesday December 14, 2016 @03:51PM (#13179541)

Pressing F12 and modifying the DOM usually works as well.

[ Parent | on HN ]