this post was submitted on 20 Aug 2024
599 points (98.9% liked)

Cybersecurity - Memes

1977 readers
2 users here now

Only the hottest memes in Cybersecurity

founded 1 year ago
MODERATORS
599
submitted 3 months ago* (last edited 3 months ago) by [email protected] to c/[email protected]
 

This practice is not recommended anymore, yet still found in many enterprises.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 17 points 3 months ago

Which is often a lot more secure than requiring you to create a new password. Requiring a new password frequently leads to people making memorable passwords which are a lot less secure than a good password which is kept for years.

A few years back, my company suffered a big cyber attack where the attack vector was the credentials of a high level user who frequently changed their password to the year and month for next password change, i.e. "2018october". Apparently this was common enough that the attackers were able to brute force/guess it.