r/mildlyinfuriating Mar 08 '16

Overdone Fuck it, hackers win.

Post image
14.6k Upvotes

992 comments sorted by

View all comments

Show parent comments

11

u/snowbirdie Mar 08 '16

The government mandate is a minimum of 12 characters. This website is out of compliance and should be reported. Source: work IT for government.

6

u/King_Baboon Mar 08 '16

Local or federal mandate?

2

u/snowbirdie Mar 09 '16

Not sure. I'm federal though.

2

u/tfysertet Mar 09 '16

african or european sparrow?

3

u/bmlbytes It's like rain on your wedding day. Mar 08 '16

How about this then?

2

u/stevewmn Mar 08 '16

Our minimum used to be 15, but then they instituted 2 factor security for everything in such a way that password access is almost never used. Somewhere along the line they scaled password access back to 10 characters.

1

u/snowbirdie Mar 09 '16

Yes, 2FA is mandated for most things as well, even online courses like OP mentioned.

1

u/SullyKid Mar 08 '16

I've used multiple government websites that require 14 characters and all the other bullshit OP was asked for. You sure it's not just the agency you work for?

2

u/snowbirdie Mar 09 '16

You misread something. OP's post is only 8 characters minimum. I said government requires 12 characters. You just re-stated what I already did.

1

u/SullyKid Mar 09 '16

You're right, I did. Sorry. I thought I saw OP post something somewhere about 14 characters. And I thought you said maximum.