|
The customer is always rigght ......... or not!
CQ de W5ALT
Walt Fair, Jr., P. E.
Comport Computing
Specializing in Technical Engineering Software
|
|
|
|
|
Both. In order to maintain PCI compliance, many companies have to have this requirement. My company does. Our security people know it's a dumb policy, but we have to have it to stay compliant.
1 month seems extreme though.
|
|
|
|
|
they are. But you can always find out how many passwords they look back and compare and change it back. Write a powershell script that does it. say that they only checked the last five. So change it six times and then back to the original. Set it to run at the first of the month. good to go.
To err is human to really mess up you need a computer
|
|
|
|
|
This is not the hill to die on. Save your energy for when you really need it; and you will.
"(I) am amazed to see myself here rather than there ... now rather than then".
― Blaise Pascal
|
|
|
|
|
If the policy is too strict, then people just write it on a piece of paper and stick it on their monitors. And they usually just substitute one character when they are forced to change it every 8 weeks.
|
|
|
|
|
A guy I know used to just make the password some phrase, a special character, and the date he changed it.
"CaveMan^May102017" for example.
It satisfies a lot of the typical requirements.
_____________________________
A logician deducts the truth.
A detective inducts the truth.
A journalist abducts the truth.
Give a man a mug, he drinks for a day. Teach a man to mug...
|
|
|
|
|
|
Both.
Password management is more complicated than that - and it inevitably suffers from being distilled down to what the end user can understand.
Password length is usually set to a period and length that exceeds the time a given computer can brute force the password. In other words - if a reasonable adversary can crack the password on a fast PC in 30 days, then either the password needs to be longer, or you need to change it sooner. Of course - explaining this to people can be complicated - and enforcing complex rules for passwords like, if it's 8 characters it needs to be changed every 10 days, and if it's 9 characters then every 30 are also not possible on most systems.
So people try to generalize.
If you explain to them for example that you have 15 character passwords, and cracking them brute force is just not practical - you have processes to change them when key people who know the password leave, (or if the crypto were to be broken), then perhaps you could have your approach risk accepted. In practice this will probably save you a lot of effort - and you will end up with better passwords as well.
Hope that helps.
|
|
|
|
|
Turgid peptic nags odd effects of drug (8)
|
|
|
|
|
TuRgIdPePtIcNaGs Odd letters:
TRIPPING
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
sure is
|
|
|
|
|
Too easy - it wasn't a sentence, so the "odds" made it pop out! 
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
Yeah I thought of loads of good ones last night - but5 couldn't remember any of them on the way in.
|
|
|
|
|
That's why I email things to myself!
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
I always knew the "I got sent this" was lies.
|
|
|
|
|
So Yesterday , we had a small function from Workplace which was celebrating a successful product launch and completion for 5/10 years of few employees etc. The main idea was a informal meeting of colleagues and good food. The invitation said "Business Casual".
Well When I arrived at the venue, I was one of the 3 guys who were in Business casual. Kakhi pants/ Long sleeve shirt or similar lines. Rest of the people were in suit and 100% formal.
So my question is Business casual too much fuss? Or formal suit is also considered business casual?
cheers,
Super
------------------------------------------
Too much of good is bad,mix some evil in it
|
|
|
|
|
Perhaps business casual just = no trainer shoes these days.
|
|
|
|
|
super wrote: Rest of the people were in suit and 100% formal.
Formal is short with shirt... I have not suit at all...
Skipper: We'll fix it.
Alex: Fix it? How you gonna fix this?
Skipper: Grit, spit and a whole lotta duct tape.
|
|
|
|
|
Business casual? What's so difficult about it? It's every bit as vague and poorly defined as any spec you're ever likely to be given - as a developer, it should be a very easy concept to deal with!
98.4% of statistics are made up on the spot.
|
|
|
|
|
Presumably it was lunch - maybe it is what they normally wear to work!
Never underestimate the power of human stupidity
RAH
|
|
|
|
|
My personal reading of "business casual" would be a button-down shirt, decent trousers (pants) - good jeans or more formal, and proper shoes (no sneakers).
A suit and/or tie is definitely not casual.
Ad astra - both ways!
|
|
|
|
|
last job I worked a while ago we had casual Fridays, jeans and a polo shirt were acceptable. After a while they gave us a company polos - so I wore them every day with khaki's Mon-Thu (and later others followed) and my own polo with jeans on Friday.
Occasionally the boss might mention for a first client meeting to wear "a shirt" - which was code for business pants and a long sleeve business shirt and a tie.
No jacket though - rare in Singapore except for directors, lawyers, all Japanese office workers and visitors who don't know any better - which is sensible in the heat here.
"Business casual" here is definitely no more then the company polo with khakis.
After Japan the place I see business jackets most worn is Aus (even more than UK/USA), and really no idea why they will even walk around in 40+ degree Melbourne dry heat wearing the damn things; yes I know they're a backwards lot but that's just insane.
Signature ready for installation. Please Reboot now.
|
|
|
|
|
|
Unless I get parameters, I assume that just means not to wear flip flops and a &%@# You t-shirt.
"There are three kinds of lies: lies, damned lies and statistics."
- Benjamin Disraeli
|
|
|
|
|
Sounds like you were correct, and they were wrong.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
