News for hackers. Stuff that matters.

A comment on Password expiration is dead, long live passwords. Parent comment

Re:Password expiration is dead, long live passwords by bluGill on Monday June 03, 2019 @09:24AM (#20082818)
Banks are probably still running on the old mainframe (old as in upgraded in 1998 when y2k forced it), with password storage that was state of the art in 1960 (plain text, but the file is actually protected well so hackers can't get it). That isn't to say better password cannot be used, just that they have never enabled it.
[ Parent | on HN ]
Re:Password expiration is dead, long live passwords by SketchySeaBeast on Monday June 03, 2019 @09:56AM (#20083085)
I don't understand that - I get that the system that holds the data is old, but when creating an online banking system shouldn't the piece that holds the data be a good half dozen steps removed from the website and authentication?
[ Parent | on HN ]
Re:Password expiration is dead, long live passwords by bluGill on Monday June 03, 2019 @10:20AM (#20083329)
Not if you want a single sign on. Of course customers only use the web login, but internal people have to deal with all these different logins.
[ Parent | on HN ]