Taking over historically grown IT is hell

  • gnufuu@lemmy.ca
    20·
    il y a 1 mois

    Keep them on their toes. After hunting down the last of them it’s time to introduce multi-factor.

      • thebestaquaman@lemmy.world
        3·
        il y a 1 mois

        Why would you do such things? Just let me log in using some trusted authenticator please. If you can’t do that, you may as well replace everything with a confirmation mail every time I log in, cause you bet I’m going to click “forgot my password” Every Single Time and get in via the reset-email anyway.

        You forcing me to change my password all the time just adds extra overhead to the inevitability that you’ll let me in after mailing me a confirmation code.

    • gegil@sopuli.xyz
      8·
      il y a 1 mois

      One one hand, password manager is useful to log-in into random ass web service which i use once a year to get one random file or whatever and forget.

      On the other hand, i need to authenticate every time i use my computer, and i need to just know the password, not pasting it from password manager every time.

  • [object Object]@lemmy.ca
    8·
    il y a 1 mois

    This is topical because I just got one of these emails.

    Nobody is going to bother guessing that I would be stupid enough to use a four character password. It’s good enough for my bank and my phone, so it’s good enough for my computer. (/s)

    At least now they recommend pass phrases instead of words, but the examples were contradictory and they wrote all the words in 13375p34k

    • BlindPenguin@piefed.socialOPEnglish
      3·
      il y a 1 mois

      I let the users choose whether they want pass phrases or classic cryptic passwords. So far nobody wanted passphrases, because apparently they can’t do 10 finger system typing. Next step will be self-service passwords & MFA once we fixed the major issues around here.

  • adarza@lemmy.caEnglish
    7·
    il y a 1 mois

    hmm. that many letters. ok. 1…2…3… ah 16. cool.

    here we go:

    Input new Password:

    Sixteenpassword!

    ERROR: you must include a number

    there is a number in it you stupid machine.

    • SirSamuel@lemmy.world
      3·
      il y a 1 mois

      *ERROR: Your password must have a minimum sixteen characters

      Minimum_16_characters

      *Your password has been accepted

  • thatOneGuy@aussie.zone
    6·
    il y a 29 jours

    My work has a mandatory password update every ~3 months, seemingly keeps all previous hashes, and some employees have been around for 20+ years.

    I feel for the IT security team.

      • thatOneGuy@aussie.zone
        3·
        il y a 29 jours

        Clearly our company has set their own standards…

        …this is also on top of 2FA, Zscaler, and a few other secure network requirements I haven’t fully poked around. 🤷🏻‍♂️

        We regularly work with a tonne of sensitive and PII data, such that even one leak would be disastrous.

  • ouRKaoS@lemmy.today
    5·
    il y a 1 mois

    Fun password trick:

    Pick an adjective, a color, an animal, and a cuss word.

    Now pick 2 numbers and a special character, or 2 special characters and a number.

    Separate your 4 words with your other 3 items and, boom! 12+ character password that you already remember.

    Bonus points: lose the numbers and characters and you have a hilarious insult.

    • BlindPenguin@piefed.socialOPEnglish
      3·
      il y a 30 jours

      It’s a nice idea, but random passwords are quite a bit safer than any manually created password. We use password generators for that. Some of them also support passwords that can be pronounced. In some way, anyway, because the “words” make no sense.

      Though, i’m still waiting for someone who would accept a passphrase.

    • mirshafie@europe.pub
      3·
      il y a 1 mois

      I make up a sentence and then I write it out. Why limit yourself to 12 characters?

      Like the actual phrase

      Why limit yourself to 12 characters?

      is a very strong password, easy to remember, fast to type and has the added benefit of not containing any adjectives.

  • bugbear@lemmy.sdf.org
    2·
    il y a 1 mois

    The Plague: Someone didn’t bother reading my carefully prepared memo on commonly-used passwords. Now, then, as I so meticulously pointed out, the four most-used passwords are: love, sex, secret, and…

    Margo: [glares at The Plague]

    The Plague: god. So, would your holiness care to change her password?

    (Hackers 1995)

  • DudeImMacGyver@kbin.earth
    2·
    il y a 1 mois

    scrambles their password

    “Rules is rules, reset your password if you want to work here. You can run if you want but it’ll be to the fucking unemployment line.”