Top all-time · #15427
SANS Institute
Company blog · securingthehuman.sans.org/blogsecuritycareer
SANS Institute is the company blog at securingthehuman.sans.org, writing about security and career. Since 2016, 5 different Hacker News readers have linked it 5 times, most often “Time for Password Expiration to Die”. No feed was found, so read it on the site itself.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
Linked for its summary of NIST SP800-63-3 Digital Identity Guidelines, which the commenter quotes on password rules that were long pushed by security advice. The post is the SANS Security Awareness blog.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Shape your awareness program with trusted risk-driven security awareness training that redefines human risk management and ultimately drives a strong security culture.
Most-linked posts?
- Time for Password Expiration to Die2 people · 2 mentions · first linked 2018-01-04
What Hacker News says?
The article seems arising in reference to the NIST SP800-63-3 Digital Identity Guidelines, published June 22, 2017: https://pages.nist.gov/800-63-3/ Three highlights of NIST SP800-63-3, from the SANS Security Awareness blog: "For years people like Per Thorsheim, Cormac Herley and Dr. Angela Sasse have fought against this. Finally these painful behaviors are being put to rest by NIST in their official publication SP8…
Comment linking /blog/2017/07/27/nist-has-spoken-death-to-entropy-love-live-the-passphrase
on “Bill Burr regrets 2003 password recommendation report”Submitted Time for Password Expiration to Die as a story · 3 points
HN discussionSubmitted Time for Password Expiration to Die as a story · 2 points
HN discussionSubmitted Security Lessons from a Power Saw as a story · 2 points
HN discussionSubmitted Security Lessons from a Power Saw as a story · 1 points
HN discussion