Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Flaw has Microsoft Authenticator overwriting MFA accounts, locking users out. Parent comment
In the case of password construction and complexity, we’ve learned that rotation and complexity leads to worse password practices.
https://pages.nist.gov/800-63-3/sp800-63b.html
However many large companies do not adhere to the latest NIST guidance (which is many years old by now).
This is why password complexity and rotation is still so nuts.
There are no comments on this comment yet.
In the case of password construction and complexity, we’ve learned that rotation and complexity leads to worse password practices.
https://pages.nist.gov/800-63-3/sp800-63b.html
However many large companies do not adhere to the latest NIST guidance (which is many years old by now).
This is why password complexity and rotation is still so nuts.