News for hackers. Stuff that matters.
Re:NIST advises services to not require that passwords be ch... by tyingq on Saturday May 20, 2017 @03:39PM (#14383977)
Agreed. As it stands today, PCI, Sarbanes Oxley, HIPPA, and other drivers are used as hammers to force password change policies.

Even if they don't mention it directly, some audit firm tosses it in as a best practice to support something more generically stated in the standards.

There are no comments on this comment yet.