News for hackers. Stuff that matters.

A comment on Microsoft says mandatory password changing is “ancient and obsolete” (2019). Parent comment

Re:Microsoft says mandatory password changing is “ancient an... by mumblemumble on Monday April 19, 2021 @02:56PM (#26866606)
I've also seen it written into business contracts with clients. Which makes it almost impossible to change, because doing so would require both sides to agree to pay for an expensive (and irksome) exchange between their respective legal teams.
[ Parent | on HN ]
Re:Microsoft says mandatory password changing is “ancient an... by tracker1 on Monday April 19, 2021 @07:12PM (#26868892)
Working with govt agencies, this is somewhat painful. "Must be AES256 encrypted at rest." is one of my favorites.
[ Parent | on HN ]