Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.misc > #18183

Re: [Link Posting] Password expiration is dead, long live your passwords

From Sylvia Else <sylvia@email.invalid>
Newsgroups comp.misc
Subject Re: [Link Posting] Password expiration is dead, long live your passwords
Date 2019-06-11 21:55 +1000
Message-ID <gm9j54Fd0poU1@mid.individual.net> (permalink)
References <MlpB1YKRhgDPsuv1m3oW7DKj@dont-email.me> <gm90qvF97g1U1@mid.individual.net> <qdo1qp$84h$1@dont-email.me>

Show all headers | View raw


On 11/06/2019 9:03 pm, Rich wrote:
> Sylvia Else <sylvia@email.invalid> wrote:
>> On 3/06/2019 7:55 am, Rich wrote:
>>>         ####################################################################
>>>         # ATTENTION: This post is a reference to a website.  The poster of #
>>>         # this Usenet article is not the author of the referenced website. #
>>>         ####################################################################
>>>
>>> <URL:https://techcrunch.com/2019/06/02/password-expiration-is-dead-long-
>>> live-your-passwords/>
>>>
>>> The text below is a quotation from the URL above:
>>>>
>>>>    May was a momentous month, which marked a victory for sanity and
>>>>    pragmatism over irrational paranoia. I'm obviously not talking about
>>>>    politics. I'm talking about Microsoft finally - finally! but credit to
>>>>    them for doing this nonetheless! - removing the password expiration
>>>>    policies from their Windows 10 security baseline.
>>>>
>>>>    Although NIST and others precede this and deserve that credit, I think
>>>>    it's worth taking a moment to recognize this moment in time as truly a
>>>>    fundamental change in the industry.
>>>>
>>>>    - SwiftOnSecurity (@SwiftOnSecurity) May 31, 2019
>>>>
>>>>    Many enterprise-scale organizations (including TechCrunch's owner
>>>>    Verizon) require their users to change their passwords regularly. This
>>>>    is a spectacularly counterproductive policy.
>>>>
>>>>    ...
>>
>> Why did this take so long?
> 
> Security theater is *very* slow to change.
> 
>> Why did so many people think it was a good idea to force password
>> changes?
> 
> This is one likely explanation:
> 
> https://themindunleashed.com/2016/02/the-famous-social-experiment-5-monkeys-and-a-ladder.html
> 

Perhaps that's also why I have to endure "music" at McDonalds. 
Presumably, the received wisdom is that it improves profits. I've 
repeatedly asked whether there's any evidence. If anyone knows, they're 
not saying.

Sylvia.

Back to comp.misc | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

[Link Posting] Password expiration is dead, long live your passwords Rich <rich@example.invalid> - 2019-06-02 21:55 +0000
  Re: [Link Posting] Password expiration is dead, long live your passwords Jerry Peters <jerry@example.invalid> - 2019-06-03 20:28 +0000
    Re: [Link Posting] Password expiration is dead, long live your passwords Rich <rich@example.invalid> - 2019-06-03 20:35 +0000
    Re: [Link Posting] Password expiration is dead, long live your passwords RS Wood <rsw@therandymon.com> - 2019-06-09 09:10 -0400
      Re: [Link Posting] Password expiration is dead, long live your passwords Richard Kettlewell <invalid@invalid.invalid> - 2019-06-09 14:22 +0100
        Re: [Link Posting] Password expiration is dead, long live your passwords Rich <rich@example.invalid> - 2019-06-09 14:39 +0000
      Re: [Link Posting] Password expiration is dead, long live your passwords Jerry Peters <jerry@example.invalid> - 2019-06-09 20:33 +0000
        Re: [Link Posting] Password expiration is dead, long live your passwords ant@zimage.comANT (Ant) - 2019-06-10 11:22 -0500
        Re: [Link Posting] Password expiration is dead, long live your passwords Kerry Imming <kcimming@pobox.com> - 2019-06-10 11:42 -0500
          Re: [Link Posting] Password expiration is dead, long live your passwords Rich <rich@example.invalid> - 2019-06-10 18:05 +0000
          Re: [Link Posting] Password expiration is dead, long live your passwords Richard Kettlewell <invalid@invalid.invalid> - 2019-06-10 22:28 +0100
  Re: [Link Posting] Password expiration is dead, long live your passwords Sylvia Else <sylvia@email.invalid> - 2019-06-11 16:42 +1000
    Re: [Link Posting] Password expiration is dead, long live your passwords Huge <Huge@nowhere.much.invalid> - 2019-06-11 09:39 +0000
      Re: [Link Posting] Password expiration is dead, long live your passwords Sylvia Else <sylvia@email.invalid> - 2019-06-11 20:29 +1000
        Re: [Link Posting] Password expiration is dead, long live your passwords Huge <Huge@nowhere.much.invalid> - 2019-06-11 11:01 +0000
          Re: [Link Posting] Password expiration is dead, long live your  passwords Mike Spencer <mds@bogus.nodomain.nowhere> - 2019-06-11 17:18 -0300
            Re: [Link Posting] Password expiration is dead, long live your  passwords Jerry Peters <jerry@example.invalid> - 2019-06-12 00:04 +0000
              Re: [Link Posting] Password expiration is dead, long live your  passwords Mike Spencer <mds@bogus.nodomain.nowhere> - 2019-06-12 01:49 -0300
              Re: [Link Posting] Password expiration is dead, long live your  passwords Huge <Huge@nowhere.much.invalid> - 2019-06-12 08:49 +0000
            Re: [Link Posting] Password expiration is dead, long live your  passwords Huge <Huge@nowhere.much.invalid> - 2019-06-12 08:57 +0000
      Re: [Link Posting] Password expiration is dead, long live your passwords Jim Jackson <jj@franjam.org.uk> - 2019-06-11 17:57 +0000
        Re: [Link Posting] Password expiration is dead, long live your passwords Rich <rich@example.invalid> - 2019-06-11 18:05 +0000
        Re: [Link Posting] Password expiration is dead, long live your passwords Huge <Huge@nowhere.much.invalid> - 2019-06-11 21:08 +0000
      Re: [Link Posting] Password expiration is dead, long live your passwords Jerry Peters <jerry@example.invalid> - 2019-06-12 00:10 +0000
        Re: [Link Posting] Password expiration is dead, long live your passwords Huge <Huge@nowhere.much.invalid> - 2019-06-12 08:50 +0000
    Re: [Link Posting] Password expiration is dead, long live your passwords Rich <rich@example.invalid> - 2019-06-11 11:03 +0000
      Re: [Link Posting] Password expiration is dead, long live your passwords Sylvia Else <sylvia@email.invalid> - 2019-06-11 21:55 +1000
        Re: [Link Posting] Password expiration is dead, long live your passwords Huge <Huge@nowhere.much.invalid> - 2019-06-11 15:30 +0000
          Re: [Link Posting] Password expiration is dead, long live your  passwords Mike Spencer <mds@bogus.nodomain.nowhere> - 2019-06-11 17:43 -0300
            Re: [Link Posting] Password expiration is dead, long live your  passwords Huge <Huge@nowhere.much.invalid> - 2019-06-12 08:58 +0000
          Re: [Link Posting] Password expiration is dead, long live your passwords kludge@panix.com (Scott Dorsey) - 2019-06-11 21:14 -0400
            Re: [Link Posting] Password expiration is dead, long live your passwords Huge <Huge@nowhere.much.invalid> - 2019-06-12 08:52 +0000
            Re: [Link Posting] Password expiration is dead, long live your passwords Sylvia Else <sylvia@email.invalid> - 2019-06-15 11:45 +1000
              Re: [Link Posting] Password expiration is dead, long live your passwords kludge@panix.com (Scott Dorsey) - 2019-06-15 15:46 -0400
    Re: [Link Posting] Password expiration is dead, long live your passwords Kerry Imming <kcimming@pobox.com> - 2019-06-11 12:19 -0500
      Re: [Link Posting] Password expiration is dead, long live your passwords Huge <Huge@nowhere.much.invalid> - 2019-06-11 18:21 +0000
    Re: [Link Posting] Password expiration is dead, long live your passwords kludge@panix.com (Scott Dorsey) - 2019-06-11 21:12 -0400

csiph-web