News for hackers. Stuff that matters.

A comment on Microsoft says mandatory password changing is “ancient and obsolete” (2019). Parent comment

Re:Microsoft says mandatory password changing is “ancient an... by xmprt on Monday April 19, 2021 @01:54PM (#26865905)
It feels extremely negligent of third party auditors to recommend (and sometimes require) companies to enforce worse, obsolete security practice.
[ Parent | on HN ]
Re:Microsoft says mandatory password changing is “ancient an... by underwater on Monday April 19, 2021 @05:27PM (#26868150)
SOC 2 is defined by the American Institute of Certified Public Accountants. Having computer security defined by accountants seems crazy, but is in the style of the bureaucratic mess of modern enterprise.
[ Parent | on HN ]