News for hackers. Stuff that matters.
Re:GCHQ – Not So Secure? by scoot on Tuesday March 26, 2013 @06:58AM (#5442352)
That doesn't make it any less egregious. GCHQ (of all organisations!) have failed to carry out even a minimum standard of due diligence in selecting a supplier that handles sensitive personal information of prospective employees.
Re:GCHQ – Not So Secure? by jiggy2011 on Tuesday March 26, 2013 @08:51AM (#5442855)
They have finite resources so there is an opportunity cost to everything.

More time auditing their public website means less time auditing military systems etc.

Re:GCHQ – Not So Secure? by Ntrails on Tuesday March 26, 2013 @11:18AM (#5443835)
The real question is why anyone would sign up to such things using a "real" password. I've lost count of the number of jobsites and so on that I registered for with a random string knowing that a) Firefox would remember it and b) On the off chance it doesn't, and I get through to a stage where I ever need the password I can just recover/reset

Signing up for websites that have limited/no repeat value is part of everyday life and I don't have high expectations of them