top | item 44266925

(no title)

claudex | 8 months ago

There are policies to prevent changing the password more than once a day to prevent that. I've encountered it in several places

discuss

order

thih9|8 months ago

Fascinating. In other words:

In order to force the user to change their password more frequently (long term), the user is prevented from changing their password too frequently (short term).

I wonder whether the person who added that is actually confident that the benefits outweigh the drawbacks or is that a case of tunnel vision.

eqvinox|8 months ago

There are also systems that keep a history of old passwords just to prevent you from reusing one.

jandrese|8 months ago

I like the ones that not only keep a history of your old passwords but will reject any password that is similar to any of your 30 previous passwords, which means they're storing either a plaintext or reversibly encrypted list of every password somewhere on the system. Talk about a goldmine for the hacker that dumps that database.

Viliam1234|8 months ago

The obvious solution is to have a Monday password, a Tuesday password, etc.