BlindPenguin@piefed.social to Lemmy Shitpost@lemmy.worldEnglish · 8 days agoNo, you can't keep your 20 year old dictionary passwordmedia.piefed.socialimagemessage-square26linkfedilinkarrow-up19arrow-down11file-text
arrow-up18arrow-down1imageNo, you can't keep your 20 year old dictionary passwordmedia.piefed.socialBlindPenguin@piefed.social to Lemmy Shitpost@lemmy.worldEnglish · 8 days agomessage-square26linkfedilinkfile-text
minus-squarethatOneGuy@aussie.zonelinkfedilinkarrow-up1·7 days agoMy work has a mandatory password update every ~3 months, seemingly keeps all previous hashes, and some employees have been around for 20+ years. I feel for the IT security team.
minus-squarespacegoat@lemmy.worldlinkfedilinkarrow-up1·7 days agoMandatory password updates go against NIST standards
minus-squarethatOneGuy@aussie.zonelinkfedilinkarrow-up1·7 days agoClearly our company has set their own standards… …this is also on top of 2FA, Zscaler, and a few other secure network requirements I haven’t fully poked around. 🤷🏻♂️ We regularly work with a tonne of sensitive and PII data, such that even one leak would be disastrous.
My work has a mandatory password update every ~3 months, seemingly keeps all previous hashes, and some employees have been around for 20+ years.
I feel for the IT security team.
Mandatory password updates go against NIST standards
Clearly our company has set their own standards…
…this is also on top of 2FA, Zscaler, and a few other secure network requirements I haven’t fully poked around. 🤷🏻♂️
We regularly work with a tonne of sensitive and PII data, such that even one leak would be disastrous.