On Mon, 2024-01-22 at 09:49 -0700, Joe Zeff wrote:
On 1/22/24 00:30, Tim via users wrote:
Then, when it went haywire one day I had to tell telephone support the password to sort things out. Embarrassing, and quite satisfying at the same time.
When I was doing tech support, the ID10Ts in IT decided to make our passwords expire after 60 days on services inside the firewall.
One of my banks still does this. I keep telling them this is outdated security practice from the 1960's but they don't listen. The upshot is that they're encouraging people to use weak passwords they can remember, and then recycle them: password1, password2, password3 etc.
They also won't let me use a password manager on their website, so I have to copy-paste from a different window or tab.
So many of these rules come from CYA.
poc