News for hackers. Stuff that matters.
Re:French publisher arrested in London for his refusal to te... by LawTalkingGuy on Wednesday April 19, 2023 @01:28PM (#35630877)
> you can be told not to reveal that you've told them the password

This is a good reason to use numbered, pre-made, one-time-passwords and require a reason when using them. "AdminX lost fob - using override to reset creds." Requiring you to lie is one step past requiring you to remain silent.

If the 'next PW to be used' number increased on everyone's override-PWs it couldn't be hidden. Co-admins could know to check an audit log of changes.

There are no comments on this comment yet.