2026-01-05 10:30 UTC
Replies (17)
-
@WTL@mastodon.social 2026-01-05 11:11
@diffrentcolours @GossiTheDog 🤣
-
@khleedril@cyberplace.social 2026-01-05 11:13
@diffrentcolours Tomorrow you'll forget the '2' on the end.
-
@matth@techhub.social 2026-01-05 11:13
@diffrentcolours No password should be considered secure without a final exclamation mark.
-
@yadt@tech.lgbt 2026-01-05 11:20
@diffrentcolours I think the NCSC also advises against posting your excellent passwords on Mastodon. (Which is annoying sometimes, when I want to comment on some feature of my password...)
-
@GroupNebula563@mastodon.social 2026-01-05 11:27
@diffrentcolours actually probably a pretty good password
-
@Fishd@infosec.exchange 2026-01-05 11:53
@diffrentcolours
-
@CryogenicIce9@mastodon.online 2026-01-05 12:26
@diffrentcolours Where's the special character though? wait the quote marks are part of the password, that's genius
-
@silvermoon82@wandering.shop 2026-01-05 13:05
@diffrentcolours "Your password policy continues to be bad even in January 2026 battery staple"
-
@log@mastodon.sdf.org 2026-01-05 14:49
@diffrentcolours I'm up to "ExpiringPasswords55IsDumb" mainly because I need two numeral characters.
-
@xinit@mastodon.coffee 2026-01-05 15:01
@diffrentcolours "ERROR: Password must be between 12-14 characters in length in include a symbol." @GossiTheDog
-
@DamonHD@mastodon.social 2026-01-05 15:08
@diffrentcolours All I can see is ****************
-
@benjohn@todon.nl 2026-01-05 15:09
@diffrentcolours not “2!” To cover the symbol requirement?
-
@Jamessocol@indieweb.social 2026-01-05 17:21
@diffrentcolours also NIST SP800-63B §5.1.1.2 if you need those special chars
-
@Mark62@cupoftea.social 2026-01-05 19:41
@diffrentcolours @HowardGees My brother was head of IT and says constantly requiring a password change is actually very insecure as people tend to write it down to remember.
-
@greatlaketrout@noc.social 2026-01-06 00:15
@diffrentcolours I argue about this ALL the f’ing time. Ours expire every 90 days, which by the way was the general guidance prior to 2015. Now every major cybersecurity expert says don’t force random changes, make them really strong and hold onto them. Guess our IT department is a bit behind on their best practices.
-
@nxskok@cupoftea.social 2026-01-06 02:29
@diffrentcolours "cannot be the same as any of your previous 37 passwords". All right then, "NCSC advises against regular password expiry38"
-
@ananas@social.linux.pizza 2026-01-06 05:06
@diffrentcolours Source, for those who want it: https://www.ncsc.gov.uk/collection/passwords/updating-your-approach