Well there it is. It's a government website. It needs to be secure. Password restrictions have always annoyed me on websites where it's just my shit that going to get fucked. Yes all of these restrictions will make my shit more secure, but if I want my password to be hunter12 then that should be my perogative. But on a government website it makes sense.
Edit: politeness
Edit 2: Jesus fucking Christ I get it. These types of passwords are more susceptible to brute force passwords. I don't need 20 of you motherfuckers to tell me the same damn thing.
Password strength should be measured by bits of entropy, not arbitrary limitations. These forced limitations actually reduce the amount of possible combinations making brute forcing easier. Also, people are likely to compensate for the difficult restrictions by just writing it down. Maybe not a big deal for a one-off government website, but forcing password restrictions like this for a bank account means someone is just going to write it down on a piece of paper or save it in their phone which makes it that much easier for someone to get access to it.
Which I why I said it annoys me when it's just my shit. I should get to pick exactly what password I want for my bank account. I agree with that point.
I was pretty upset work a shit as government website we used to document unclassified training had requirements like that, but my fucking bank was letters and numbers only 8 characters max, no upper case.
1.6k
u/King_Baboon Mar 08 '16
That's what makes it even more infuriating. This is a government site where I have to take mandatory training.