Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I agree with you in principal, but is also important to remember that policy != practice. For a policy against shared accounts, for example, there is no reasonable way to guarantee that Employee A has not given his password to Fired Employee B.


if you are compromised in that manner "Employee A has not given his password to Fired Employee B." then no password policy is going to save you.

Also remember passwords are only ONE part of your security armour, they aren't the entire suit.





Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: