Email or username:

Password:

Forgot your password?
23 posts total
devopscats

Apparently new saner NIST CSP password recommendations are in…

3.1.1.2. Password Verifiers
7 The following requirements apply to passwords:

1. Verifiers and CSPs SHALL require passwords to be a minimum of eight characters in length and SHOULD require passwords to be a minimum of 15 characters in length.
2. Verifiers and CSPs SHOULD permit a maximum password length of at least 64 characters.
3. Verifiers and CSPs SHOULD accept all printing ASCHI [RFC20) characters and the space character in passwords.
4. Verifiers and CSPs SHOULD accept Unicode ISO/ISC 10646 characters in passwords. Each Unicode code point SHALL be counted as a single character when
evaluatine nassword lenath
5. Verifiers and CSPs SHALL NOT impose other composition rules (e.g., requiring mixtures of different character types) for passwords.
6. Verifiers and CSPs SHALL NOT require users to change passwords periodically.
However, verifiers SHALL force a change if there is evidence of compromise of the authenticator.
7. Verifiers and CSPs SHALL NOT permit the subscriber to store a hint that is
accessible to an unauthenticated claimant.
8. Verifiers and CSPs SHALL NOT prompt subscribers to use knowledge-based
733
734
authentication (KBA) (e.g., "What was the name of your first pet?") or security
questions when choosing passwords.
735
9. Verifiers SHALL verify the entire submitted password (i.e., not truncate it).
Show previous comments
dee 🏳️‍⚧️

@devopscats bullet 4 is going to cause such issues for those who can't even manage the other bullet points 😂

Count emojis as a single char... Well, that's open to a lot of language specific fun

europlus :autisminf:

@devopscats @robdaemon the periodic change one has been gone for a while now, thankfully.

Þór Sigurðsson

@devopscats #8 is 👍👍too! Microsoft is breaking that with Windows 11.

Q:"What's the name of your 1st pet?"
A:"ð0maz04p9es7nuty45p0æ7uyn5esoæl8gvuynme4o8gusyem4o8gvsuy extl8onbs7y45læo8iseum 5l8owsugyb lo4es587yguspæo349uy nbslo8eg54ryunlo8y<"

Every time.

Show previous comments
penryu

@devopscats @ckape And all I'm thinking is, "Wait, it never specified the boat is on the same side of the river..."

I'm glad we have AI to think _around_ produce... I mean, problems.

Da_Gut

@devopscats @DaveMWilburn no wonder the government is so interested in ChatGPT

devopscats

Sorry if I'm grumpy today, discovered Hunt and Brew coldbrew coffee gives me severe indigestion...

devopscats

Also been battling with everything Canonical...

Show previous comments
Kevin P. Fleming

@devopscats Super easy to build that product, it always says zero!

Graham Spookyland🎃/Polynomial

@devopscats alt text: promo image for a current clamp meter, with the meter being held next to some cables, but the cables aren't connected to anything and they're also fibre optic.

Brian Hawthorne

@devopscats @woozle My house is definitely Studio Ghibli inspired. I’m still trying to get the soot sprites to move out, and I can barely fit in the living room next to the cat bus.

Go Up