Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
| From | Huge <Huge@nowhere.much.invalid> |
|---|---|
| Newsgroups | comp.misc |
| Subject | Re: [Link Posting] Password expiration is dead, long live your passwords |
| Date | 2019-06-12 08:50 +0000 |
| Organization | Piglet's Pickles & Preserves |
| Message-ID | <gmbsmvFs9q8U2@mid.individual.net> (permalink) |
| References | <MlpB1YKRhgDPsuv1m3oW7DKj@dont-email.me> <gm90qvF97g1U1@mid.individual.net> <gm9b6cFbbonU2@mid.individual.net> <qdpfti$gep$2@dont-email.me> |
On 2019-06-12, Jerry Peters <jerry@example.invalid> wrote:
> Huge <Huge@nowhere.much.invalid> wrote:
>> On 2019-06-11, Sylvia Else <sylvia@email.invalid> wrote:
>>> On 3/06/2019 7:55 am, Rich wrote:
>>>> ####################################################################
>>>> # ATTENTION: This post is a reference to a website. The poster of #
>>>> # this Usenet article is not the author of the referenced website. #
>>>> ####################################################################
>>>>
>>>> <URL:https://techcrunch.com/2019/06/02/password-expiration-is-dead-long-
>>>> live-your-passwords/>
>>>>
>>>> The text below is a quotation from the URL above:
>>>>>
>>>>> May was a momentous month, which marked a victory for sanity and
>>>>> pragmatism over irrational paranoia. I'm obviously not talking about
>>>>> politics. I'm talking about Microsoft finally - finally! but credit to
>>>>> them for doing this nonetheless! - removing the password expiration
>>>>> policies from their Windows 10 security baseline.
>>>>>
>>>>> Although NIST and others precede this and deserve that credit, I think
>>>>> it's worth taking a moment to recognize this moment in time as truly a
>>>>> fundamental change in the industry.
>>>>>
>>>>> - SwiftOnSecurity (@SwiftOnSecurity) May 31, 2019
>>>>>
>>>>> Many enterprise-scale organizations (including TechCrunch's owner
>>>>> Verizon) require their users to change their passwords regularly. This
>>>>> is a spectacularly counterproductive policy.
>>>>>
>>>>> ...
>>>
>>> Why did this take so long? Why did so many people think it was a good
>>> idea to force password changes?
>>
>> Having spent many, many fruitless hours in shouty meetings with management,
>> trying to convince them that password changes are a stupid idea, the only
>> conclusion I can come to is that it's a religious matter.
>>
> I'm guessing auditors -- with a checklist, one item of which is:
> requires periodic password changes.
> The auditors probably got it from some seminar in the distant past and
> passed it around as received wisdom from then on.
Almost certainly true.
--
Today is Pungenday, the 17th day of Confusion in the YOLD 3185
Rising above bedlam
Back to comp.misc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
[Link Posting] Password expiration is dead, long live your passwords Rich <rich@example.invalid> - 2019-06-02 21:55 +0000
Re: [Link Posting] Password expiration is dead, long live your passwords Jerry Peters <jerry@example.invalid> - 2019-06-03 20:28 +0000
Re: [Link Posting] Password expiration is dead, long live your passwords Rich <rich@example.invalid> - 2019-06-03 20:35 +0000
Re: [Link Posting] Password expiration is dead, long live your passwords RS Wood <rsw@therandymon.com> - 2019-06-09 09:10 -0400
Re: [Link Posting] Password expiration is dead, long live your passwords Richard Kettlewell <invalid@invalid.invalid> - 2019-06-09 14:22 +0100
Re: [Link Posting] Password expiration is dead, long live your passwords Rich <rich@example.invalid> - 2019-06-09 14:39 +0000
Re: [Link Posting] Password expiration is dead, long live your passwords Jerry Peters <jerry@example.invalid> - 2019-06-09 20:33 +0000
Re: [Link Posting] Password expiration is dead, long live your passwords ant@zimage.comANT (Ant) - 2019-06-10 11:22 -0500
Re: [Link Posting] Password expiration is dead, long live your passwords Kerry Imming <kcimming@pobox.com> - 2019-06-10 11:42 -0500
Re: [Link Posting] Password expiration is dead, long live your passwords Rich <rich@example.invalid> - 2019-06-10 18:05 +0000
Re: [Link Posting] Password expiration is dead, long live your passwords Richard Kettlewell <invalid@invalid.invalid> - 2019-06-10 22:28 +0100
Re: [Link Posting] Password expiration is dead, long live your passwords Sylvia Else <sylvia@email.invalid> - 2019-06-11 16:42 +1000
Re: [Link Posting] Password expiration is dead, long live your passwords Huge <Huge@nowhere.much.invalid> - 2019-06-11 09:39 +0000
Re: [Link Posting] Password expiration is dead, long live your passwords Sylvia Else <sylvia@email.invalid> - 2019-06-11 20:29 +1000
Re: [Link Posting] Password expiration is dead, long live your passwords Huge <Huge@nowhere.much.invalid> - 2019-06-11 11:01 +0000
Re: [Link Posting] Password expiration is dead, long live your passwords Mike Spencer <mds@bogus.nodomain.nowhere> - 2019-06-11 17:18 -0300
Re: [Link Posting] Password expiration is dead, long live your passwords Jerry Peters <jerry@example.invalid> - 2019-06-12 00:04 +0000
Re: [Link Posting] Password expiration is dead, long live your passwords Mike Spencer <mds@bogus.nodomain.nowhere> - 2019-06-12 01:49 -0300
Re: [Link Posting] Password expiration is dead, long live your passwords Huge <Huge@nowhere.much.invalid> - 2019-06-12 08:49 +0000
Re: [Link Posting] Password expiration is dead, long live your passwords Huge <Huge@nowhere.much.invalid> - 2019-06-12 08:57 +0000
Re: [Link Posting] Password expiration is dead, long live your passwords Jim Jackson <jj@franjam.org.uk> - 2019-06-11 17:57 +0000
Re: [Link Posting] Password expiration is dead, long live your passwords Rich <rich@example.invalid> - 2019-06-11 18:05 +0000
Re: [Link Posting] Password expiration is dead, long live your passwords Huge <Huge@nowhere.much.invalid> - 2019-06-11 21:08 +0000
Re: [Link Posting] Password expiration is dead, long live your passwords Jerry Peters <jerry@example.invalid> - 2019-06-12 00:10 +0000
Re: [Link Posting] Password expiration is dead, long live your passwords Huge <Huge@nowhere.much.invalid> - 2019-06-12 08:50 +0000
Re: [Link Posting] Password expiration is dead, long live your passwords Rich <rich@example.invalid> - 2019-06-11 11:03 +0000
Re: [Link Posting] Password expiration is dead, long live your passwords Sylvia Else <sylvia@email.invalid> - 2019-06-11 21:55 +1000
Re: [Link Posting] Password expiration is dead, long live your passwords Huge <Huge@nowhere.much.invalid> - 2019-06-11 15:30 +0000
Re: [Link Posting] Password expiration is dead, long live your passwords Mike Spencer <mds@bogus.nodomain.nowhere> - 2019-06-11 17:43 -0300
Re: [Link Posting] Password expiration is dead, long live your passwords Huge <Huge@nowhere.much.invalid> - 2019-06-12 08:58 +0000
Re: [Link Posting] Password expiration is dead, long live your passwords kludge@panix.com (Scott Dorsey) - 2019-06-11 21:14 -0400
Re: [Link Posting] Password expiration is dead, long live your passwords Huge <Huge@nowhere.much.invalid> - 2019-06-12 08:52 +0000
Re: [Link Posting] Password expiration is dead, long live your passwords Sylvia Else <sylvia@email.invalid> - 2019-06-15 11:45 +1000
Re: [Link Posting] Password expiration is dead, long live your passwords kludge@panix.com (Scott Dorsey) - 2019-06-15 15:46 -0400
Re: [Link Posting] Password expiration is dead, long live your passwords Kerry Imming <kcimming@pobox.com> - 2019-06-11 12:19 -0500
Re: [Link Posting] Password expiration is dead, long live your passwords Huge <Huge@nowhere.much.invalid> - 2019-06-11 18:21 +0000
Re: [Link Posting] Password expiration is dead, long live your passwords kludge@panix.com (Scott Dorsey) - 2019-06-11 21:12 -0400
csiph-web