PDA

View Full Version : Web Security........is it really THAT bad?


rychehitman
11-01-2011, 09:42 AM
Ok, here at work we have a very large network. It used to be we had different passwords and usernames for multiple systems, but now they have the great idea to streamline everything so all you need now is one username and password for everything.

Your username is simply a form of your name, so all you have to do is pick a password.


The following are the requirements for setting up your password, including three of four of the following character sets:
-capital letters (A-Z)
-lowercase letters (a-z)
-numerals, and special characters (!@#$%^&*+).
-Be sure to create a unique password that you have NEVER USED
- Do NOT include spaces or non-English characters.



Okay...that sounds easy enough, right?

Now you need to select 5 security questions from the following list to answer:


1) What was your childhood nickname?
2) What was your first pet's type and name?
3) What was the model of the first automobile you drove?
4) Where did your parents meet?
5) What street did you live on when you were 11?
6) Enter a frequent flyer number.
7)What occupation did you want to pursue as an adult?
8) What was your favorite childhood activity?
9) Who is your mother's or father's closest friend?
10) Where were you on 1/1/2000?
11) Where was your maternal great-grandfather born?
12) Who is your favorite speaker?
13) What book did you most dislike when you were in school?
14) What is the longest time you have lived in a city or town?
15) Which famous person would your mother like to meet?
16) What is your library card number?


Holy crap, is that an odd list, or what? Okay...time consuming...but still fairly harmess, right.

Final step in the process is to actually select a password and see if it's accepted.

YES! My password was accepted!

Wait, what's this?

Password expires in 10 days
(on Mon Nov 11 08:20:20 EST 2011)


Seriously???? every ten days? WTF?!

Screw the Taliban....the internet terrorists have won! Are we really THAT far removed from the pre-internet world that we can't just go back to it?

joefixit2
11-01-2011, 11:05 PM
what is your favorite color? Blue...no green..ahhhhhhhh!!!!!

Argonus
11-01-2011, 11:09 PM
what is your favorite color? Blue...no green..ahhhhhhhh!!!!!

:hilarious:

Ridiculous list of questions.

Jesse321
11-06-2011, 10:20 AM
Wells Fargo makes you change your password every 60 days, and they keep a listing of your previous passwords, so you can't reuse any of them ... they all have to be new every time!

You have to wonder, with as many customers as some of these banks and other institutions have how much storage capacity must they delegate to housing all the previous passwords and associating them with the various accounts! :peoples:

nbr3bagshotrow
11-06-2011, 10:57 AM
Wells Fargo makes you change your password every 60 days, and they keep a listing of your previous passwords, so you can't reuse any of them ... they all have to be new every time!

You have to wonder, with as many customers as some of these banks and other institutions have how much storage capacity must they delegate to housing all the previous passwords and associating them with the various accounts! :peoples:

It's minimal considering the terabytes of data a company like wells fargo has. Our dept of education does the same thing for all its employees and teachers throughout colorado andits barely a meg ofdata on a couple of oracle database tables.

kirthew
11-06-2011, 11:55 PM
for my work passwords I try to use a name and then change a character or a number. Like currently I am using my daughters name and then the day she was born, with a special character as an i.

Changing your password every 10 days is just freaking insane. That is going to piss some IT guy off, and it will be changed.

lord odin
11-07-2011, 12:37 AM
All my passwords are named password.






























Maybe I shouldn't have made that public.
Help how do I delete my post?