News for hackers. Stuff that matters.

A comment on Why are banks still getting authentication so wrong?. Parent comment

Re:Why are banks still getting authentication so wrong? by pc86 on Wednesday May 14, 2025 @09:11AM (#43984121)
You call it "willfully [sabotaging] security," I call it "the best alternative that doesn't leave me with a 30% chance of forgetting my password every 60 days."

1Password is smart enough to let me have a secure, non-leaked password of high complexity that I have memorized, then let me go years without resetting it. I started there and the policies have made my laptop progressively less secure over time.

[ Parent | on HN ]
Re:Why are banks still getting authentication so wrong? by hamburglar on Wednesday May 14, 2025 @06:23PM (#43989808)
It just so happens that the best alternative you could think of is literally the worst alternative anybody could think of. If I didn’t know better I would call it wilfully bad and chosen more to prove a point than for any other reason.
[ Parent | on HN ]