this post was submitted on 17 Jul 2023

169 points (88.9% liked)

Programmer Humor

19623 readers

96 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

Keep content in english
No advertisements
Posts must be related to programming or programmer topics

founded 1 year ago

MODERATORS

Feyter@programming.dev

anzo@programming.dev

BurningTurtle@programming.dev

pylapp@programming.dev

169

Creating a password in 2023 be like (programming.dev)

submitted 1 year ago* (last edited 1 year ago) by likeaduck@programming.dev to c/programmer_humor@programming.dev

33 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] ono@lemmy.ca 11 points 1 year ago* (last edited 1 year ago) (2 children)

Probably some sort of entropy approximation.

That's exactly what it is, and that is the correct way to do it.

All those ridiculous letter/case/symbol/number rules come from guidelines written by Bill Burr for NIST 20 years ago. He has since stated that he regrets them, and NIST has abandoned them. Because they're actually counterproductive to security.

[–] a_statistician@programming.dev 5 points 1 year ago

NIST has abandoned them

Would that my IT department had gotten the memo. They think NIST is god-tier, even when our own CS department is like... yeah, no. And personally, having worked with NIST researchers in fields that aren't IT policy, I wonder how good their IT policy docs really are. The whole organization is bureaucracy getting in the way of good science and common sense.