News for hackers. Stuff that matters.

A comment on Ask HN: How Do You Maintain Security When Working Remotely?. Parent comment

Re:Ask HN: How Do You Maintain Security When Working Remotely? by mobiplayer on Sunday March 15, 2015 @10:12AM (#9206542)
How do you "make sure" they've got strong passwords without compromising password security for those people? Do you just have their word, hear them press many keys when authenticating, ...?
[ Parent | on HN ]
Re:Ask HN: How Do You Maintain Security When Working Remotely? by falcolas on Sunday March 15, 2015 @10:37AM (#9206630)
In our case, we run the widely available password cracking tools and rainbow tables against our stored passwords. If we can get them, those users are notified and their passwords reset.

Yes, we leave any salts and hashes in place - it limits the checks we can reasonably make to the usual password lists but it still catches a large number of poor passwords.

[ Parent | on HN ]