Printable View
Yes. A 4 digit PIN is fairly trivial to crack if somebody is serious, a liability that is untenable to anybody who is at all accountable for security.Quote:
Originally Posted by xyz
Complexity is sorta dumb, though. Password length is not. Turn everything into a passphrase (with spaces) and life gets both easier and more secure.
Check out San Juan Sewing below PineNeedle.Quote:
Originally Posted by chicken feathers
I've had mixed experiences with San Juan Sewing. But I did discover Let 'er Rip in Pagosa Springs. A couple of ladies there, doing great work, with very cheap prices. They repair all the Wolf Creek (Wolfy!) gear, too.
San Juan Sewing would be a good pass phrase. PineNeedle would be ok too.Quote:
Originally Posted by Alpinord
Are passwords really being hacked or threatened? Are they so threatened I need to change them every 6 months because hackers are closing in on my password? Seems to me the online hacking world is centred around scams. Like romance, Bitcoin and fake Microsoft help desk scammers.Quote:
Originally Posted by Mustonen
My employer portal has password changes every 90 days…brutal. So ridiculous cuz you end up having to write them down/which defeats the whole purpose of privacy….lol.Quote:
Originally Posted by xyz
IT managers have to keep their jobs so 90 day password changes mean they get a steady stream of laptop unlocks. Add in a few phishing tests and they have work forever.
I'm sure the geeks hate this but just append a consecutive number to a well-worn passphrase. I'm up to like N00n@nrules29 at this pointQuote:
Originally Posted by BC.
That’s what I’ve been doing for over a decade now.Quote:
Originally Posted by dannynoonan
Interestingly, outside of some evidence of password compromise forced password changes reduce the security of a system, on net.Quote:
Originally Posted by xyz
So yes, passwords are threatened and credential compromise is a very real threat. And no, forced password changes are indeed reactive bullshit that is not founded in fact or reason.
You got some purdy teeth.Quote:
Originally Posted by Alpinord
And 10x on fuck waterproof zippers, and RAB.
We have 90 day required changes and it’s such a pain in the ass that we’ve all adopted the same seasonal word choices in order to remember them. I could probably log in to 90% of my coworkers’ accounts if I wanted to.Quote:
Originally Posted by Mustonen
Eh, the vislon teeth zippers are fine (though particularly the lighter duty ones eventually have problems, and when they do it’s a full zipper replacement rather than just the slider). But coil zips have their place. Sounds like OR (I mostly like their stuff) should have put a beefier zipper on your jacket, oh well.
My understanding is that password issues generally fall into three buckets:Quote:
Originally Posted by xyz
1. The user fell for a scam and gave someone the login info "for support purposes"
2. The user has the same password at multiple sites, from those that have serious security setups and professionals watching for intrusions (eg financial) to the local ski club message board setup by some dude in his spare time ten years ago, shortly before he left for somewhere with better snow; then the low-security site gets hacked and the credentials used elsewhere (but see also 1)
3. The password is truly horrible and easy to guess (password123, VailSucks, etc)
Historically, category 4 was when a site would get compromised and the attackers would then use the captured but encrypted login info to brute force passwords, but modern crypto and password storage should make that impractical for any attack without three-letter-agency support.
Forced changes can reduce the carnage from 1 and 2 by limiting the lifespan of compromised credentials, but using a password manager and having a good passphrase for it that you don't share with anyone, especially fake support reps, is a better solution.
Except when your password manager gets cracked. LastPass, I'm looking at you.Quote:
Originally Posted by anotherVTskibum
Had a piece of Carolina reaper and ghost pepper jerky 90 minutes ago. Posting from the toilet.
Could also be filed under ‘shit that burns’.
Don't forget to wipe your ass with a sno-cone.
Same password with 2 numbers at the end since I started here in 2006. I'm at 54 now. Plan is to get to 80 and retire.Quote:
Originally Posted by dannynoonan
My employer has a re-use policy checker that will reject minor modifications.
They keep promising biometrics, but ......
I can change my password when it inevitable gets compromised. I can't change my fingerprints. Giving your biometrics or DNA to damn near anyone is just stupid.
Fair point, but should be filed un the Shit that threatens you day to day life. We all came here to be annoyed by changing our passwords by 3 or 4 digits/numbers.
Yep…Quote:
Originally Posted by dannynoonan
Assholes annoy me.
Wouldn't need passwords, tsa, security cameras, locks, etc etc etc. Fucking assholes
We have that. And a blacklist that includes all known password compromises. And a filter that looks for stupid variations of your name.Quote:
Originally Posted by riser4
Some form of bio/token based continuous identity monitoring is where it ends up. We aren’t there yet so we still have passwords.