News for hackers. Stuff that matters.

A comment on Stop deploying web application firewalls. Parent comment

Re:Stop deploying web application firewalls by rwmj on Monday November 13, 2023 @04:38PM (#38255735)
The PCI-DSS website itself requires that you change password every 12 months. At the same time the period for recertifying PCI-DSS is ... every 12 months. I have a systematic way to create a new password each time, which probably isn't secure.
[ Parent | on HN ]
Re:Stop deploying web application firewalls by geraldwhen on Monday November 13, 2023 @06:08PM (#38256606)
I have to rotate my password at work every 3 months. Without a system, it wouldn’t be sustainable.
[ Parent | on HN ]