Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
I don't understand why people put the least amount of effort into securing the most vulnerable parts of their lives.
Because it doesn't matter. All personal info on almost all US citizens has been released to criminals and hackers and there has been literally zero fallout. The Equifax breach exposed 150 million people to identity theft and fraud. Heard anything about it since? How about any other breach? Where's all the news stories about crimewaves happening with all this data? How come Visa and Mastercard don't seem to care? The government certainly doesn't care.

As far as I can tell, it's just a lot of hand wringing and "the sky is falling" with zero evidence to back up the fear-mongering.
 
Why are passwords MY problem? Don't blame the user for computer system access incompetence. It's the service provider's stupidity which has lumbered us with such a stupid method to access these systems. Just fix it and don't blame users for working around this incoherent drivel about password complexity. Can't find a better solution then go away and FIGURE it out.
 
password_strength.png

Via XKCD
 
That means changing a system that’s been in place for years, and because we are a small company and hire out our IT it means paying that company to come up with new security protocols. Basically we don’t know that there’s been a problem, everyone is turning a blind eye to what is really going on, and fixing this situation that hasn’t caused a problem will cost.

We honestly don’t know if it really HAS caused a problem but honestly I don’t think so. Our company is too small, and too specialized to generate a lot of interest from hackers, competitors, etc. It would be more profitable to break into our banking and accounting and they have an outside company handle that so the rules probably aren’t the same. I don’t know for certain because I’m not in accounting.

have you looked into Okta https://www.okta.com/ ? They are a bolt on front end to all you other systems and provide an SSO experience with 2-factor. It works really well, reasonably priced, and seems to work with a huge variety of authentication types.
 
How is this even remotely possible? So many website have annoying rules... that are not consistent. (Capital letter, number, "special character")
 
Who cares, let people use whatever password they want, its their risk.

No one is saying anyone shouldn’t use ‘XYZ’ for a password. I think we all understand the ‘Risks’, but the article is clearly indicating how little effort someone is taking to use a common password for their bank accounts or company log-in, ect, that should require more thought in today’s world of cyber infiltration.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.