News for hackers. Stuff that matters.
Re:Password Rules Are Bullshit by bogomipz on Friday March 10, 2017 @08:42AM (#13838478)
"There are websites that I don't use often where I literally have to reset the password (and go through all the i-forgot-my-password steps) every time I want to log in because they forced me to come up with an overly creative password."

Indeed and then one's email potentially becomes the weakest link in one's password security.

Re:Password Rules Are Bullshit by x1798DE on Friday March 10, 2017 @09:55AM (#13839000)
If a site offers email resets at all, how often you (legitimately) use them generally doesn't play into the security analysis. If it's easier to get access to your e-mail than to get the password to the account that can be reset by proving access to the e-mail, then your e-mail is the weakest link.
Re:Password Rules Are Bullshit by bogomipz on Friday March 10, 2017 @10:40AM (#13839377)
>"if it's easier to get access to your e-mail than to get the password to the account that can be reset by proving access to the e-mail, then your e-mail is the weakest link."

This was exactly my point yes :)