Re:Zoom Security Exploit: Cracking private meeting passwords
by fendy3002 on Wednesday July 29, 2020 @08:49PM
(#23993197)
I believe it's company / business level decision. 6 to 10 length numeric password is easy to remember. And non rate limiting enables older, non tech savvy users to have as many error as they want.
But the password complexity, rate limiting and other security measurements are there for a reason, and whoever cannot learn from history are doomed to repeat it.
Re:Zoom Security Exploit: Cracking private meeting passwords
by winsome on Wednesday July 29, 2020 @10:48PM
(#23993992)
Rate-limiting has nothing to do with the older, non-tech savvy users. You're thinking of maximum failed attempts. Rate-limiting is about preventing bots from spamming an API call.
But the password complexity, rate limiting and other security measurements are there for a reason, and whoever cannot learn from history are doomed to repeat it.