News for hackers. Stuff that matters.

A comment on NIST advises services to not require that passwords be changed periodically. Parent comment

Re:NIST advises services to not require that passwords be ch... by kevhito on Saturday May 20, 2017 @01:51PM (#14383484)
Can you back up these recommendations with actual studies or research papers? Or are you just making up your security strategy by gut instinct here?
[ Parent | on HN ]
Re:NIST advises services to not require that passwords be ch... by ScottBurson on Saturday May 20, 2017 @02:43PM (#14383695)
Even if it's the latter, they're actually thinking about what they're trying to protect and what system would work best to protect it. That has got to be an improvement on the mindless, cargo-cult approach to security that most organizations take.
[ Parent | on HN ]