Finally: a usable and secure password policy backed by science

Sun, 08 Nov 2020 09:08:41 +0200

Bookmarked https://www.cylab.cmu.edu/news/2020/10/20-passwordpolicy.html

This is dangerous nonsense. Lots of people are going to conclude from this that they don't have to use complex password, avoiding dictionary words and symbols. But despite the headline- this is *not* the fundamental conclusion drawn in the paper. The subtlety is in the fact that they keep saying "user-generated and memorable". The headline might as well read "humans are terrible at judging whether something they create is complex and random"

#nonsense · Louche Cannon

Finally: a usable and secure password policy backed by science