Path: csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: Huge Newsgroups: comp.misc Subject: Re: [Link Posting] Password expiration is dead, long live your passwords Date: 11 Jun 2019 09:39:24 GMT Organization: Piglet's Pickles & Preserves Lines: 40 Message-ID: References: Reply-To: usenet@huge.org.uk X-Trace: individual.net yeG79NUK6w39bykQ3clTPw8SP8c3nHAgPh+OY6swDfr3HLfEMG Cancel-Lock: sha1:xxlrlDJPJSf9Yty6C8bfneBY42c= X-No-Archive: Yes X-Clacks-Overhead: GNU Terry Pratchett User-Agent: slrn/1.0.3 (Linux) Xref: csiph.com comp.misc:18179 On 2019-06-11, Sylvia Else wrote: > On 3/06/2019 7:55 am, Rich wrote: >> #################################################################### >> # ATTENTION: This post is a reference to a website. The poster of # >> # this Usenet article is not the author of the referenced website. # >> #################################################################### >> >> > live-your-passwords/> >> >> The text below is a quotation from the URL above: >>> >>> May was a momentous month, which marked a victory for sanity and >>> pragmatism over irrational paranoia. I'm obviously not talking about >>> politics. I'm talking about Microsoft finally - finally! but credit to >>> them for doing this nonetheless! - removing the password expiration >>> policies from their Windows 10 security baseline. >>> >>> Although NIST and others precede this and deserve that credit, I think >>> it's worth taking a moment to recognize this moment in time as truly a >>> fundamental change in the industry. >>> >>> - SwiftOnSecurity (@SwiftOnSecurity) May 31, 2019 >>> >>> Many enterprise-scale organizations (including TechCrunch's owner >>> Verizon) require their users to change their passwords regularly. This >>> is a spectacularly counterproductive policy. >>> >>> ... > > Why did this take so long? Why did so many people think it was a good > idea to force password changes? Having spent many, many fruitless hours in shouty meetings with management, trying to convince them that password changes are a stupid idea, the only conclusion I can come to is that it's a religious matter. -- Today is Boomtime, the 16th day of Confusion in the YOLD 3185 Rising above bedlam