this post was submitted on 03 Apr 2026
598 points (98.5% liked)

Comic Strips

23091 readers
2531 users here now

Comic Strips is a community for those who love comic stories.

The rules are simple:

Web of links

founded 2 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] FelixCress@lemmy.world 6 points 1 day ago (2 children)

Fuck the cyber idiots and their "change password" requirements.

[–] fenrrs@lemmy.world 9 points 1 day ago (1 children)

Current best practice in cybersecurity is to not arbitrarily ask users to change passwords every x days, so any site doing this are following old guidelines.

[–] dual_sport_dork@lemmy.world 6 points 23 hours ago (1 children)

Yes, because among other things this annoys users into just writing down their password on a Post-It and sticking it to the bottom of their keyboard or monitor ripe for any passerby to take.

I have explained this to various management types repeatedly over the decades and nobody seems to get it.

[–] NaibofTabr@infosec.pub 4 points 23 hours ago (1 children)
[–] Draegur@lemmy.zip 1 points 4 hours ago

Wow it's almost as though somebody in there reads xkcd and knows about correct horse battery staple!

[–] negativenull@piefed.world 8 points 1 day ago (1 children)

Static password with good 2FA is the way to go.

[–] mrsemi@lemmy.world 4 points 1 day ago* (last edited 1 day ago) (1 children)

I ran into some app a while back that required 2fa "text you a code" to log in every time.

If you put in the wrong password, it still sent you the 2fa... Which it would accept for login.

I'm honestly not sure if it ever even checked the password.

[–] negativenull@piefed.world 2 points 1 day ago (1 children)

I've seen an increase of sites that bypass passwords altogether and rely on 2fa (claude.ai was one I noticed the otherday)

[–] dual_sport_dork@lemmy.world 6 points 23 hours ago (1 children)

That's... not 2FA anymore. It's reverted to 1FA, now with sprinkles on it.

[–] jaybone@lemmy.zip 3 points 21 hours ago

Those aren’t sprinkles.