Click here to Skip to main content
14,385,144 members

Welcome to the Lounge

   

For discussing anything related to a software developer's life but is not for programming questions. Got a programming question?

The Lounge is rated Safe For Work. If you're about to post something inappropriate for a shared office environment, then don't post it. No ads, no abuse, and no programming questions. Trolling, (political, climate, religious or whatever) will result in your account being removed.
 
GeneralRe: Password policy Pin
Robert/Not The Pirate9-Mar-18 21:14
MemberRobert/Not The Pirate9-Mar-18 21:14 
GeneralRe: Password policy Pin
PIEBALDconsult8-Mar-18 2:40
MemberPIEBALDconsult8-Mar-18 2:40 
GeneralRe: Password policy Pin
Eddy Vluggen8-Mar-18 2:50
MemberEddy Vluggen8-Mar-18 2:50 
GeneralRe: Password policy Pin
Nathan Minier8-Mar-18 2:53
MemberNathan Minier8-Mar-18 2:53 
GeneralRe: Password policy Pin
Eddy Vluggen8-Mar-18 3:23
MemberEddy Vluggen8-Mar-18 3:23 
GeneralRe: Password policy Pin
Nathan Minier8-Mar-18 3:35
MemberNathan Minier8-Mar-18 3:35 
GeneralRe: Password policy Pin
Eddy Vluggen8-Mar-18 3:39
MemberEddy Vluggen8-Mar-18 3:39 
GeneralRe: Password policy Pin
Nathan Minier8-Mar-18 3:51
MemberNathan Minier8-Mar-18 3:51 
I disagree. There is no "control the entire chain" when a user can use the same password on my system as on a third party system, and I have no idea what precautions that system might have in place. Compared to the risk of compromise of credentials through third parties, the risk that an employee might keep a written ledger of passwords (or use a password manager) is much easier to accept.

As an SA or ISSO, I have no control over what passwords users have on other systems; but if I make them change it often enough I can reduce the risk of password reuse, and risk reduction is all that you can do in security. Not having password change requirements is frankly "lazy", as you are not only putting your system at risk, but any other that the user might have an account with.
"There are three kinds of lies: lies, damned lies and statistics."
- Benjamin Disraeli

GeneralRe: Password policy Pin
Eddy Vluggen8-Mar-18 3:55
MemberEddy Vluggen8-Mar-18 3:55 
GeneralRe: Password policy Pin
Nathan Minier8-Mar-18 4:11
MemberNathan Minier8-Mar-18 4:11 
GeneralRe: Password policy Pin
Eddy Vluggen8-Mar-18 13:58
MemberEddy Vluggen8-Mar-18 13:58 
GeneralRe: Password policy Pin
Nathan Minier9-Mar-18 2:27
MemberNathan Minier9-Mar-18 2:27 
GeneralRe: Password policy Pin
Eddy Vluggen9-Mar-18 4:15
MemberEddy Vluggen9-Mar-18 4:15 
GeneralRe: Password policy Pin
Nathan Minier9-Mar-18 5:15
MemberNathan Minier9-Mar-18 5:15 
GeneralRe: Password policy Pin
Eddy Vluggen9-Mar-18 6:36
MemberEddy Vluggen9-Mar-18 6:36 
GeneralRe: Password policy Pin
ZurdoDev8-Mar-18 3:09
MemberZurdoDev8-Mar-18 3:09 
GeneralRe: Password policy Pin
raddevus8-Mar-18 3:28
Memberraddevus8-Mar-18 3:28 
GeneralRe: Password policy Pin
A_Griffin8-Mar-18 6:09
MemberA_Griffin8-Mar-18 6:09 
GeneralRe: Password policy Pin
raddevus8-Mar-18 7:45
Memberraddevus8-Mar-18 7:45 
GeneralRe: Password policy Pin
Tim Carmichael8-Mar-18 3:50
MemberTim Carmichael8-Mar-18 3:50 
GeneralRe: Password policy Pin
A_Griffin8-Mar-18 5:55
MemberA_Griffin8-Mar-18 5:55 
GeneralRe: Password policy Pin
dandy728-Mar-18 4:24
Memberdandy728-Mar-18 4:24 
GeneralRe: Password policy Pin
Scott Serl8-Mar-18 7:04
MemberScott Serl8-Mar-18 7:04 
GeneralRe: Password policy Pin
dandy728-Mar-18 11:47
Memberdandy728-Mar-18 11:47 
GeneralRe: Password policy Pin
TheGreatAndPowerfulOz8-Mar-18 5:36
MemberTheGreatAndPowerfulOz8-Mar-18 5:36 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.