News for hackers. Stuff that matters.

A comment on 49% of workers, forced to change passwords, reuse same one with minor change. Parent comment

Re:49% of workers, forced to change passwords, reuse same on... by iudqnolq on Friday December 13, 2019 @11:15PM (#21787766)
That actually sounds pretty secure, if the computer had a reasonable password and FDE you've just implemented a hacky password manager. Even without FDE you're better than anyone who writes it down on a sticky or uses something trivial.

Unless they're using Excel functions to generate password{n++} . That'd be clever and yet horrid at the same time.

[ Parent | on HN ]
Re:49% of workers, forced to change passwords, reuse same on... by jankiehodgpodge on Saturday December 14, 2019 @06:18AM (#21788925)
Although at most workplaces your documents are just a folder on a shared drive somewhere, which may not be secured well and in some cases not secured at all.
[ Parent | on HN ]
Re:49% of workers, forced to change passwords, reuse same on... by Aloha on Saturday December 14, 2019 @12:05PM (#21790498)
I used a little php script to do the password generation, and yes we did use FDE
[ Parent | on HN ]
Re:49% of workers, forced to change passwords, reuse same on... by iudqnolq on Saturday December 14, 2019 @12:42PM (#21790778)
If the script is accessible to other people I suppose you have to worry about it being hacked, especially if you let php get out of date or take input in say password length?
[ Parent | on HN ]