Interesting People mailing list archives

The Guy Who Invented Those Annoying Password Rules Now Regrets Wasting Your Time


From: "DAVID FARBER" <dfarber () me com>
Date: Tue, 08 Aug 2017 18:38:17 -0400




Begin forwarded message:

From: Lauren Weinstein <lauren () vortex com>
Date: August 8, 2017 at 4:34:12 PM EDT
To: nnsquad () nnsquad org
Subject: [ NNSquad ] The Guy Who Invented Those Annoying Password Rules Now Regrets Wasting Your Time


The Guy Who Invented Those Annoying Password Rules Now Regrets Wasting Your Time

http://gizmodo.com/the-guy-who-invented-those-annoying-password-rules-now-1797643987

     The man in question is Bill Burr, a former manager at the
   National Institute of Standards and Technology (NIST). In
   2003, Burr drafted an eight-page guide on how to create secure
   passwords creatively called the "NIST Special Publication
   800-63. Appendix A." This became the document that would go on
   to more or less dictate password requirements on everything
   from email accounts to login pages to your online banking
   portal. All those rules about using uppercase letters and
   special characters and numbers--those are all because of Bill.
   The only problem is that Bill Burr didn't really know much
   about how passwords worked back in 2003, when he wrote the
   manual. He certainly wasn't a security expert. And now the
   retired 72-year-old bureaucrat wants to apologize.  "Much of
   what I did I now regret," Bill Burr told The Wall Street
   Journal recently, admitting that his research into passwords
   mostly came from a white paper written in the 1980s, well
   before the web was even invented. "In the end, [the list of
   guidelines] was probably too complicated for a lot of folks to
   understand very well, and the truth is, it was barking up the
   wrong tree."





-------------------------------------------
Archives: https://www.listbox.com/member/archive/247/=now
RSS Feed: https://www.listbox.com/member/archive/rss/247/18849915-ae8fa580
Modify Your Subscription: https://www.listbox.com/member/?member_id=18849915&id_secret=18849915-aa268125
Unsubscribe Now: 
https://www.listbox.com/unsubscribe/?member_id=18849915&id_secret=18849915-32545cb4&post_id=20170808183856:5ADDB3D8-7C8A-11E7-BCDC-F9F960E96B93
Powered by Listbox: http://www.listbox.com

Current thread: