News for hackers. Stuff that matters.

A comment on Microsoft says mandatory password changing is “ancient and obsolete” (2019). Parent comment

Re:Microsoft says mandatory password changing is “ancient an... by smoe on Monday April 19, 2021 @07:21PM (#26868972)
There was a talk I saw some years ago of someone that analyzed enterprise passwords and the most common pattern they found was:

Dictionary word with first letter uppercase, followed by two-digit number, followed by exclamation mark. With the overall length exactly being the minimum length of the policy.

[ Parent | on HN ]
Re:Microsoft says mandatory password changing is “ancient an... by Aeolun on Monday April 19, 2021 @08:15PM (#26869313)
My first password is always secure. The second one less so, but by the third time you make me change my password it turns into easily predictable dictionary words.
[ Parent | on HN ]
Re:Microsoft says mandatory password changing is “ancient an... by p_l on Monday April 19, 2021 @08:50PM (#26869546)
A former coworker of mine used to track how long he was working with certain client by the amount of dots after their actual password.

I simply disabled password rotation policy on my account ノ(ジ)ー'

[ Parent | on HN ]