151

Any company that still insists on forced password resets and frequent changes needs to learn about Social Engineering and Human Factors. (yiffit.net)

submitted 9 months ago by l_b_i@yiffit.net to c/casualconversation@lemmy.world

61 comments fedilink hide all child comments

These are the same companies that don't support second factors, only have their app as a second factor, or only SMS second factor. Is it too much to ask for smart card or token (yubikey) support?

you are viewing a single comment's thread
view the rest of the comments

[-] CodingCarpenter@lemm.ee 11 points 9 months ago

Every few months my company forces a password reset. We recently changed from four digit pins to full true passwords but they don't actually explain that so now you have people with like 13 digit pins it's insane. On top of that they also use two-factor Authentication simply to make things harder I believe.

Finally if you want your work email on your phone it forces you to re login every single week and because of the way Outlook mobile works you need this special number from Outlook on your phone so to log into outlook on my phone I have to authenticate with Outlook on my phone