undefined | Better HN

0 pointsnoasaservice4y ago0 comments

I know of a non-zero and non-one amounts of the following passwords in idiotic "60 day rotation policies"

Password($MONTH)($YEAR)!

Or, PasswordJanuary2022!

It easily increments to deal with stupid arbitrary rotations, passes most tests, has the small/large/number/symbol requirements.

And it's sooooooo hackable its not funny. Hell, 2 jobs ago, I ran this precisely because of 60d rotation garbage.

0 comments

icedchai4y ago

Yes, I would do exactly this. At one company, I just kept adding dots on the end for each 3 month "rotation." I didn't stay there long. I think I got to 3 dots.

j / k navigate · click thread line to collapse