{"id":1981,"date":"2017-08-24T09:21:23","date_gmt":"2017-08-24T09:21:23","guid":{"rendered":"https:\/\/davidpapkin.net\/?p=1981"},"modified":"2017-08-24T09:21:23","modified_gmt":"2017-08-24T09:21:23","slug":"current-password-management-best-practices-obsolete-david-papkin","status":"publish","type":"post","link":"https:\/\/davidpapkin.com\/?p=1981","title":{"rendered":"Current password management best practices are obsolete by David Papkin"},"content":{"rendered":"

This post by David Papkin is about current password \u00a0management rules being obsolete<\/h4>\n

<\/h1>\n

The Man Who Wrote Those Password Rules Has a New Tip: N3v$r M1^d!<\/strong><\/h4>\n

 <\/p>\n

The man who wrote the book on password management has a confession to make: He blew it.<\/p>\n

Back in 2003, as a midlevel manager at the National Institute of Standards and Technology, Bill Burr was the author of \u201cNIST Special Publication 800-63. Appendix A.\u201d The 8-page primer advised people to protect their accounts by inventing awkward new words rife with obscure characters, capital letters and numbers\u2014and to change them regularly.<\/p>\n

\n
\n
\"David<\/div>\n
<\/div>\n<\/div>\n<\/div>\n

The document became a sort of Hammurabi Code of passwords, the go-to guide for federal agencies, universities and large companies looking for a set of password-setting rules to follow.<\/p>\n

The problem is the advice ended up largely incorrect, Mr. Burr says. Change your password every 90 days? Most people make minor changes that are easy to guess, he laments. Changing Pa55word!1 to Pa55word!2 doesn\u2019t keep the hackers at bay.<\/p>\n

Also off the mark: demanding a letter, number, uppercase letter and special character such as an exclamation point or question mark\u2014a finger-twisting requirement.<\/p>\n

<\/div>\n

\u201cMuch of what I did I now regret,\u201d said Mr. Burr, 72 years old, who is now retired.<\/p>\n

In June, Special Publication 800-63 got a thorough rewrite, jettisoning the worst of these password commandments. Paul Grassi, an NIST standards-and-technology adviser who led the two-year-long do-over, said the group thought at the outset the document would require only a light edit.<\/p>\n

\u201cWe ended up starting from scratch,\u201d Mr. Grassi said.<\/p>\n

See the rest of the article here.\u00a0<\/a><\/p>\n

This concludes this post by David Papkin<\/p>\n

http:\/\/davidpapkin.org<\/a><\/p>\n

David Papkin favorite movies<\/strong><\/p>\n

Robert Deniro in GoodFellas<\/a><\/p>\n

Ava Gardner in Singapore (Flim Noir)<\/a><\/p>\n

Clarke Gable in China Seas<\/a><\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

This post by David Papkin is about current password \u00a0management rules being obsolete The Man Who Wrote Those Password Rules Has a New Tip: N3v$r M1^d!   The man who wrote the book on password management has a confession to… <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,4,11],"tags":[56,67,70,128,139,146],"class_list":["post-1981","post","type-post","status-publish","format-standard","hentry","category-computers","category-david-papkin","category-security","tag-clarkegable","tag-david-papkin","tag-davidpapkin","tag-password","tag-security","tag-singapore"],"_links":{"self":[{"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/posts\/1981","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1981"}],"version-history":[{"count":0,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=\/wp\/v2\/posts\/1981\/revisions"}],"wp:attachment":[{"href":"https:\/\/davidpapkin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1981"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1981"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/davidpapkin.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1981"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}