Re:Lessons from a Professional Password Cracker
by GoblinSlayer on Monday September 26, 2022 @11:00AM
(#32984011)
When you log into the system, a keyboard is usually the only device you have to enter the password, unless you store in on paper or on a second device. And even if you store it on paper and the password is long, some operations like lock screen (that can be also misconfigured by domain admin) become expensive and thus impractical.
[ Parent
| on HN ]
Re:Lessons from a Professional Password Cracker
by mr_mitm on Monday September 26, 2022 @11:37AM
(#32984506)
Sure. That's why I recommended password managers only for high privilege accounts. Passwords of those accounts should almost never be typed on a keyboard. They can be looked up by authorized personnel who logged on first with their low privilege account.