New password cannot be the same as new password
post
the glory of password managers should shine upon you
Password must contain at least one upper case number.
I think what happens is that your password is expired but rather than telling you it says it is incorrect. This way it doesn't leak what the current but expired password is.
I think sometimes the validation servers are down and rather than pass an error it just passes a "no match."
Shitty way to force people to change their password. Only thing worse than this is using your email login and getting an error, requesting a new password and getting an error that the account does not exist, then trying to make a new account and being told that the account is already in use.
Steam beams
Mildly infuriating typo, you probably meant steal steel beams.
Steam buns?
Steam beans.
Steamed hams
as good a place as any to drop this off https://neal.fun/password-game/
Off topic: Are his nostrils that vertically different? Did I never notice this during the airing of the show? It looks like his nose is having a stroke in the second image.
most faces are not symmetrical and would look weird if they were. I'd say some of the most beautiful people have asymmetrical faces and symmetry as a standard of beauty is a lie. we just don't study facial features separately and rather take in the face as a whole.
in other words, yes, his nostrils are at different height, but it's not that noticeable in motion.
As of 2023, a 16 character password with just lower case letters could be cracked in about 713 years and the average employee stays with a company for about 3.9 years. I really think we are making people work to hard to make good enough passwords and that is how we get people making shitty passwords. And then we ask them to repeat this process every three months, and because getting a password reset is a pain in the ass they right "FuckTh15Pl@ce" on a sticky note under there keyboard (I found that one under a VP's keyboard).
If we were doing passwords right it would be 12 characters, three character types, last until you leave the company or there is an incident. Also, by not requiring people to change the password every so often it one less thing for the IT Auditor to crab about.
NIST's official password guidelines state you should not have password expiry unless there is evidence of a compromise
And no one listens to that.
That's because they only read 800-63B and skip the other three documents.
The majority of accounts I have don't have an expiry
I wouldn't trust personal data with anything that does - they certainly don't have any security professionals on staff
Every job I've had in the past 10 years makes us reset passwords periodically
My last employer did not, life was so much better after the policy change. Although my director lost track of how long he had worked there because he stopped incrementing his password every three months.
10 years ago, that was believed to be best practice.
If they're still doing it in the last 2-3 years, they don't have anyone keeping up with modern security standards
At least it's not your data
Got to get those 1.5v batteries in your keyboard lol. I spent $140 on a Logitech keyboard and it barely registers all keys even with 1.5v batteries. Honestly I don't see why a $140 keyboard wouldn't have USB C and a rechargable battery by now. Probably what I will get next but finding a decent wireless keyboard was hard. I messed up by getting this one. You can never assume price = quality these days.
For college we use outlook for email and every time on Firefox ( or a Firefox based browser ) I enter the password wrong once it essentially tells me to fuck off and reset the password ( in a much more corporate manner, of course ).
A single time. Doesn't matter whether or not I was close. Then I have to resort to closing the full god forsaken browser and open it again if I want a second attempt.
Outlook at it's best ( which is not saying much since the bar is in Hell ).
Steam beans?
Water can do weird stuff.
Here's another
Your password can not be the same as any of the last 3 passwords.
It isn't infuriating, it is common cybersecurity.
But that's not the message you get. I've seen that message (or last 5, or whatever), but this one sounds like it can't be the same as your immediate previous password.
5 different websites telling me this doesn't seem like good cybersecurity either.
One way this happened to me was because the ” choose password” page silently truncated too long passwords. The login page didn’t truncate.
That's been the most frustrating thing about using a password manager. I set the random generator pretty high and have to reset and decrease it randomly until the login works.
That means they've updated their password requirements and your new one is now rejected, or they reject passwords of a certain age or with a lack of account activity.
They better not know whether the old password matches their new password requirements, as all they should have is the salted hash of the password, which reveals no information about the password on its own.
I'm pretty sure it was because the password was compromised. That's what I've heard for a decade now.
And why keep hashes (I fucking hope so) of old passwords?
Relevant Tom Carty
I'm more pissed that they are keeping all my old passwords... So when they get leaked, they all get leaked. Meanwhile, all our phones have cameras but we can't have them take a pic on the wrong pin entered because why? No logic in Emailing the picture to you. That's just silly.
I've always thought that the best password security possible would be to always have the real password fail a few times. People who know their password will keep trying it, someone else will try a different one. It's a variation of not giving an error that tells what failed.
I used to spoof the login page of my campus freenet, fail the first login, store the password and then jump to the actual page. End of the day I just go around the lab harvesting.
They keep multiple old passwords. You've done this whole stick before and you tried to use that same password last time. You use it for everything, and every time your new account gets "hacked." You keep using that password even when we show you that it's been in multiple leeks and is associated with your email.
"But I like the password, it's my favourite football team!"
all 50 comments