Urgently ban Cloudflare from Fantasy Grounds website

[Nylanfs]

Use dice to make your password!

[dulux-oz]

Dulux!!!!

You need an uppercase character in there!

I thought about that, but I decided that that would be pushing the joke too far

[Nickademus]

I thought about that, but I decided that that would be pushing the joke too far

And this stopped you because...?

[dulux-oz]

And this stopped you because...?

Touché

[Zhern]

I have the distinct feeling you all were making fun of me. - I work for a bank as a developer so security is one of the top issues we have to consider anytime we implement something new that is going to production. It is something I'm very conscious off with my personal information too. I would hate to see anyone get hosed because of something like this.

[Nickademus]

I'm not making fun of you. I'm making fun of the Aussie Paint.

I contributed what I use for passwords. It meets the Strong qualifications of everything I've seen so far.

[JohnD]

Are you guys saying password123 isn't secure?

OK... how about Qwerty1 then.

A former employer had so many systems that I quite literally would forget at least one a day, and I wasn't the only one since we had 6+ FTEs who did nothing but reset passwords all day 24x7.

Mandated new passwords every 30 days. Had to have one capital letter, one symbol and one number and be at least 8 characters long. No new password could be similar to any of the prior 10 you had used and you couldn't re-use passwords across multiple platforms. And heaven forbid anyone suggested a single sign-on solution.

Then IT hits the roof when they find everyone has pages in their day timers dedicated to nothing but writing passwords down, which was a valid concern, but they drove the behaviour.

[JohnD]

I thought about that, but I decided that that would be pushing the joke too far

A joke pushed too far is still funny, just for a different reason.

[Andraax]

Then IT hits the roof when they find everyone has pages in their day timers dedicated to nothing but writing passwords down, which was a valid concern, but they drove the behaviour.

Everyone should use a tool like LastPass. I have hundreds of passwords, all of them random strings, and forget none. :-)

[LordEntrails]

Are you guys saying password123 isn't secure?

OK... how about Qwerty1 then.

A former employer had so many systems that I quite literally would forget at least one a day, and I wasn't the only one since we had 6+ FTEs who did nothing but reset passwords all day 24x7.

Mandated new passwords every 30 days. Had to have one capital letter, one symbol and one number and be at least 8 characters long. No new password could be similar to any of the prior 10 you had used and you couldn't re-use passwords across multiple platforms. And heaven forbid anyone suggested a single sign-on solution.

Then IT hits the roof when they find everyone has pages in their day timers dedicated to nothing but writing passwords down, which was a valid concern, but they drove the behaviour.

Been there, for an aerospace/defense contractor.

I was in a meeting discussing a new software package and said we needed to have it authenticate against our LDAP instead of its own. The IT rep told me there was no need. I said people couldn't remember the passwords of the existing systems and had to write them all down. He said that was against policy, end of discussion.

Within two weeks we were passing in the hall and I stopped him for a moment, picked up a random keyboard to show him the note with all the users passwords written on it. By the end of the next month we had a single-signon initiative.