News for hackers. Stuff that matters.

A comment on Banks, Arbitrary Password Restrictions and Why They Don't Matter. Parent comment

Re:Banks, Arbitrary Password Restrictions and Why They Don't... by dsfyu404ed on Wednesday September 18, 2019 @01:36PM (#21007811)
>In real life if the attacker is capable of stealing my session credentials the chance of them _not_ being able to tunnel through my local network is infinitesimal.

In real life each "trivial" filter like this cuts down a substantial number of potential attackers. Defense in depth. When there's a ton of hoops to jump through attackers go find a different target.

[ Parent | on HN ]
Re:Banks, Arbitrary Password Restrictions and Why They Don't... by heavenlyblue on Wednesday September 18, 2019 @01:41PM (#21007881)
Nah, in real life it constantly batters the system administrators with unnecessary alarms who then stop taking them as seriously as they should be if they were actual attacks.
[ Parent | on HN ]