Re:GCHQ – Not So Secure?
by scoot on Tuesday March 26, 2013 @06:58AM
(#5442352)
That doesn't make it any less egregious. GCHQ (of all organisations!) have failed to carry out even a minimum standard of due diligence in selecting a supplier that handles sensitive personal information of prospective employees.
[ Parent
| on HN ]
They have finite resources so there is an opportunity cost to everything.
More time auditing their public website means less time auditing military systems etc.
The real question is why anyone would sign up to such things using a "real" password. I've lost count of the number of jobsites and so on that I registered for with a random string knowing that a) Firefox would remember it and b) On the off chance it doesn't, and I get through to a stage where I ever need the password I can just recover/reset
Signing up for websites that have limited/no repeat value is part of everyday life and I don't have high expectations of them