News for hackers. Stuff that matters.
Re:SaaS CTO Security Checklist by tptacek on Thursday May 30, 2019 @08:10PM (#20057162)
This is simply not true. You can read SP800-63B Appendix A to see the rationale NIST provides for not enforcing password complexity; it has nothing to do with MFA, and NIST believes the old rules to be intrinsically bad.

There are no comments on this comment yet.