General Consultant Discussion

https://www.wsj.com/articles/the-man-who-wrote-those-password-rules-has-a-new-tip-n3v-r-m1-d-1502124118 Stop using those crazy hard to type passwords!

Interesting. Signed up for Twilio to do some SMS automation because I sometimes miss my Outlook Calendar notifications. They demand a 14 character password and say it doesn't need to have any special characters. Wonder if its a coincidence or they read the same article.

My biggest complaint these days is the demand that we change passwords every 90 days. Most people will write down the password on a post-it note and stick it under their keyboard. And usually, the 90 days is just about the time the individual is comfortable with the password! I also wonder if it's possible to hack the IP packet and get a password that way. Are hackers watching traffic to Yahoo/Google/MSN, etc. just to see if they can get passwords? I'm sure security people have thought of that, for the most part, but. . . . Who can say?

99.9% of any sane password creation/entry screen will be using SSL Encryption. (i.e. you'll see 'https') in the URL on that page