News for hackers. Stuff that matters.
Re:Thanks FedEx, This Is Why We Keep Getting Phished by marcosdumay on Friday February 23, 2024 @09:23AM (#39480904)
They decided it was useless security theater decades ago. What happened recently is that they discovered that they rule they used to actively push causes severe harm to security.

Now there's a positive rule about not doing it.

Re:Thanks FedEx, This Is Why We Keep Getting Phished by throwway120385 on Friday February 23, 2024 @10:54AM (#39482135)
Yeah when I was a shipping clerk, we had a pile of usernames and passwords for the Census Bureau's Automated Export System on sticky notes next to the shared computer because the password rotation and complexity requirements made it impossible to remember our passwords.
Re:Thanks FedEx, This Is Why We Keep Getting Phished by marcosdumay on Friday February 23, 2024 @11:22AM (#39482583)
Oh, there are many fun games from the 90's where you must infiltrate some place and every computer has some version of "due to the password rotation requirements, this week's password for the South-East door is 1-2-3-4, effective from Monday" pasted into it.

When the NIST added the bad rule into their ruleset (it was mostly a collection of bad rules at the time), it was already widely mocked in popular culture (well within the target population).

I now wonder if that ruleset (the original one, that basically mandated you copy every flaw on Windows NT) was honest.

Re:Thanks FedEx, This Is Why We Keep Getting Phished by Terr_ on Friday February 23, 2024 @01:35PM (#39484418)
> there are many fun games from the 90's where you must infiltrate some place and every computer has some [sticky note]

"Come to think of it, it's about time to replay Deus Ex again..."

Re:Thanks FedEx, This Is Why We Keep Getting Phished by tmtvl on Friday February 23, 2024 @06:05PM (#39487297)
Don't forget to invest heavily in Swimming!