25
Hackers shoveled snow for company, were rewarded with network admin access (www.theregister.com)
submitted 3 months ago by [M, B] to c/hackernews@lemmy.bestiver.se
3 comments fedilink hide all child comments
 

Comments

you are viewing a single comment's thread
view the rest of the comments
[–] 7 points 3 months ago (1 child)

When you force users to change password every 90 days, but also don't use anything like a password filter DLL or more modern solution to block obvious seasonal patterns, folks do this.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 3 months ago

    Honestly I really struggle with this. I use a password manager and 2FA for everything I possibly can with completely random passwords.

    But on my work machine for first logging into the OS, what can you do? I have a handful of randomly generated passwords from high school memorized so I usually rotate a combination of those, but I don’t love that either.

  • permalink
  • fedilink
  • source
  • parent