News for hackers. Stuff that matters.
Re:What Is Password Spraying, How It Works and How to Preven... by jbspeakr on Sunday May 14, 2023 @09:13AM (#35937699)
Totally agree on the compromised credential check, hence it‘s also part of my general password policy recommendations [0].

I also agree that IdPs and SSO is commodity nowadays (to speak in Wardley-terms). However, some orgs still have vastly heterogeneous authentication systems. In these situations it might be financially beneficial first do unify and then switch to an off-the-shelf service provider later. OIDC makes it possible.

[0]: https://www.jbspeakr.cc/password-strength-policy-guide/#pass...

There are no comments on this comment yet.