You must use at least one uppercase letter,classic xxx movies - watch full movies for free a symbol, and a number. Or, wait, maybe not.
According to the experts at the National Institute of Standards and Technology (NIST), some of the password-strength requirements drilled into our skulls over the years are actually not that helpful.
What's worse, they may be counterproductive.
SEE ALSO: New tool teaches you how to set stronger passwordsAs such, the institute issued a new draft of security guidelines on May 11, 2017, aimed at security professionals and recommending several significant changes to the password requirements we've come to accept as a necessary part of life.
What's different? Well, for one, the experts say that forcing users to create passwords which include numbers and random characters is no longer necessary.
"[Online] services have introduced rules in an effort to increase the complexity of [passwords]," reads the draft appendix. "The most notable form of these is composition rules, which require the user to choose passwords constructed using a mix of character types, such as at least one digit, uppercase letter, and symbol. However, analyses of breached password databases reveals that the benefit of such rules is not nearly as significant as initially thought, although the impact on usability and memorability is severe."
Basically, passwords full of #'s and &'s are hard to remember, and they don't actually offer that much of a benefit. Instead, NIST recommends that people be allowed to choose any password of 8 characters or more — with a catch.
The catch being that whatever the user selects should be compared against a list of known common passwords. Lists of stolen passwords exist, and if the key to your email account is something like "monkey" then NIST says it should be rejected.
Who is doing the work of comparing your desired password against the aforementioned list? Don't worry, it's not you. Instead, that responsibility would theoretically fall to whatever service you're trying to create an account with.
What else does NIST throw out the digital window? Why that would be a little annoying thing called forced password resets. That's right, it turns out obligating users to change their passwords — regardless of any data breaches or lack thereof — is counterproductive. Of course, if a company discovers it's been hacked, you should still be required to reset your login information.
The experts at NIST also go after what is a huge pet peeve of mine: security questions. Preset security questions that a user is forced to fill out, like "what high school did you attend," are easily discovered by hackers via a simple Google search (as Sarah Palin once painfully discovered) and should be done away with entirely.
"Verifiers also SHALL NOT prompt subscribers to use specific types of information (e.g., 'What was the name of your first pet?') when choosing memorized secrets," the draft declaratively states. Nice.
So, to recap: No special characters required, no forced password resets, and no fixed (easily guessable) security questions. It's almost like all the password security advice we've been given is wrong.
Except that chestnut about using two-factor authentication. You should still definitely do that.
Topics Cybersecurity
Trump was caught practicing his speech, so the internet made jokesThis playlist of the worst songs to have sex to is delightfully cursedLyft cuts scooter service in several cities, lays off 20 peopleMetal fetus proves that Rock 'n' Roll isn't deadEngineer alleges culture of sexism and discrimination at TeslaA bunch of 'Star Wars: The Rise of Skywalker' pics and info just droppedLizzo to grace 'Saturday Night Live' with a performance next monthGoogle Earth's 'creation tools' let you make personalized mapsStalkerware is a toxic tool for domestic abusers. This coalition wants to stop it.Macy's data breach sees customer payment details stolen'Watchmen': Everything you need to know from the comic after Episode 5Twitter pairs Trump's big speech to Congress with a new top commentary featureIt's time to add internet slang 'ship' to the dictionaryThis playlist of the worst songs to have sex to is delightfully cursedHey Windows users, Apple still loves you (according to this job listing)Trump finally says why he will skip the White House Correspondents' DinnerWeWork's Adam Neumann got $1.7 billion. 2,400 employees just got fired.Metal fetus proves that Rock 'n' Roll isn't dead'Castle Rock' lied to everyone to pull of its greatest twist yetThese are the online dating emoji your love life desperately needs Google Assistant may promote advertisers without telling you about it Verizon introduces smartphone plan designed for kids 'Avengers: Endgame' ticket sales threaten to break the internet Soccer stars Alex Morgan, Megan Rapinoe talk about getting equal pay Disney's 'Lion King' recreates an iconic scene in CinemaCon footage WhatsApp adds new group messaging privacy settings Apple might not have 5G iPhone ready in time for 2020 launch Columbus Day is dead in New Mexico, but lives on in Montana and other states 'The Chilling Adventures of Sabrina' makes a good witch go bad: Review Elon Musk's favorite Autopilot feature just got updated 'Aladdin' CinemaCon footage goes all in with Will Smith's Genie YouTube employees who warned about 'toxic' video problems were ignored Apple iPad mini 5 teardown reveals RAM upgrade When a presidential election costs you the person you love the most Coinbase CEO wants to 'overthrow some corrupt dictators' John Legend's voice comes to Google Assistant on April 3 11 things to do while you're anxiously awaiting Nov. 8 'Downton Abbey' movie revolves around a royal visit Forget about hailing an Uber on your next visit to China The Mega Sg makes Sega Genesis games worth collecting
2.6487s , 10131.125 kb
Copyright © 2025 Powered by 【classic xxx movies - watch full movies for free】,Exquisite Information Network