IT Security Professional
3479 stories
·
94 followers

NIST Recommends Some Common-Sense Password Rules

1 Comment and 3 Shares

NIST’s second draft of its “SP 800-63-4“—its digital identify guidelines—finally contains some really good rules about passwords:

The following requirements apply to passwords:

  1. lVerifiers and CSPs SHALL require passwords to be a minimum of eight characters in length and SHOULD require passwords to be a minimum of 15 characters in length.
  2. Verifiers and CSPs SHOULD permit a maximum password length of at least 64 characters.
  3. Verifiers and CSPs SHOULD accept all printing ASCII [RFC20] characters and the space character in passwords.
  4. Verifiers and CSPs SHOULD accept Unicode [ISO/ISC 10646] characters in passwords. Each Unicode code point SHALL be counted as a signgle character when evaluating password length.
  5. Verifiers and CSPs SHALL NOT impose other composition rules (e.g., requiring mixtures of different character types) for passwords.
  6. Verifiers and CSPs SHALL NOT require users to change passwords periodically. However, verifiers SHALL force a change if there is evidence of compromise of the authenticator.
  7. Verifiers and CSPs SHALL NOT permit the subscriber to store a hint that is accessible to an unauthenticated claimant.
  8. Verifiers and CSPs SHALL NOT prompt subscribers to use knowledge-based authentication (KBA) (e.g., “What was the name of your first pet?”) or security questions when choosing passwords.
  9. Verifiers SHALL verify the entire submitted password (i.e., not truncate it).

Hooray.

News article.Shashdot thread.

Read the whole story
josephwebster
9 days ago
reply
Since passwords aren't going away any time soon this is a swell set of guidelines.
Denver, CO, USA
ReadLots
8 days ago
These are good.
Share this story
Delete

President Venn Diagram

2 Comments and 13 Shares
Hard to imagine political rhetoric more microtargeted at me than 'I love Venn diagrams. I really do, I love Venn diagrams. It's just something about those three circles.'
Read the whole story
josephwebster
83 days ago
reply
Denver, CO, USA
fxer
84 days ago
reply
Bend, Oregon
Share this story
Delete
2 public comments
ChristianDiscer
84 days ago
reply
Mickey Mouse for president? This classic diagram looks more like Mickey, oh I'm sorry, Minnie Mouse!
SimonHova
84 days ago
reply
I love that this is a fact about our future president.
Greenlawn, NY
matthiasgoergens
84 days ago
It's possible, but seems unlikely. At least in the 2024 election.
steelhorse
84 days ago
You really think Randall is going to be our future president? Are yard signs available yet? I'll take twenty.
gordol
84 days ago
Let's make it happen!

Bracket Symbols

2 Comments and 13 Shares
’"‘”’" means "I edited this text on both my phone and my laptop before sending it"
Read the whole story
josephwebster
103 days ago
reply
Denver, CO, USA
JayM
103 days ago
reply
Atlanta, GA
Share this story
Delete
2 public comments
jlvanderzwan
103 days ago
reply
Is the implication that all French people are animorphs?
iustinp
103 days ago
reply
He he :)
Switzerland

Saturday Morning Breakfast Cereal - God

1 Comment and 4 Shares


Click here to go see the bonus panel!

Hovertext:
This is why He stopped answering prayers.


Today's News:
Read the whole story
fxer
127 days ago
reply
NOOOOOO…and a goat you say?
Bend, Oregon
josephwebster
127 days ago
reply
Denver, CO, USA
Share this story
Delete

Cursive Letters

9 Shares
𝓘 𝓽𝓱𝓲𝓷𝓴 𝓬𝓪𝓹𝓲𝓽𝓪𝓵 𝓛 𝓲𝓼 𝓹𝓻𝓸𝓫𝓪𝓫𝓵𝔂 𝓽𝓱𝓮 𝓶𝓸𝓼𝓽 𝓯𝓾𝓷 𝓽𝓸 𝔀𝓻𝓲𝓽𝓮, 𝓽𝓱𝓸𝓾𝓰𝓱 𝓵𝓸𝔀𝓮𝓻𝓬𝓪𝓼𝓮 𝓺 𝓲𝓼 𝓪𝓵𝓼𝓸 𝓪 𝓼𝓽𝓻𝓸𝓷𝓰 𝓬𝓸𝓷𝓽𝓮𝓷𝓭𝓮𝓻.
Read the whole story
josephwebster
201 days ago
reply
Denver, CO, USA
JayM
201 days ago
reply
Atlanta, GA
Share this story
Delete

The miracle of organ donation — and a breakthrough for the future | Abbas Ardehali

1 Comment
Organ transplants save lives, but they come with challenges: every minute a healthy donated organ is on ice increases risk. And even if things go perfectly, rejection of the organ is still possible. Cardiothoracic surgeon Abbas Ardehali introduces cutting-edge medical advances in machine perfusion — a portable platform that keeps organs alive outside of the body — that could help put time back on the patient's side.



Download video: https://download.ted.com/products/176782.mp4?apikey=172BB350-0205
Read the whole story
josephwebster
212 days ago
reply
Great advancement in organ transplants.
Denver, CO, USA
Share this story
Delete
Next Page of Stories