Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://securitycafe.ca/users/chetwisniewski/statuses/111491638515318543">Chester Wisniewski (chetwisniewski@securitycafe.ca)'s status on Friday, 01-Dec-2023 05:43:06 JST</a><a href="https://securitycafe.ca/@chetwisniewski" title="chetwisniewski@securitycafe.ca"><img src="https://gnusocial.jp/avatar/139937-48-20230626052310.webp" width="48" height="48" alt="Chester Wisniewski" style="position: absolute; left: 0; top: 0;">Chester Wisniewski</a><div><ul><li><li><a href="https://gnusocial.jp/user/182605" title="thorsheim@mastodon.social">Per Thorsheim</a></li></ul></div></section><article><p>Great! TransUnion, whom I have the pleasure of receiving free credit monitoring from due to the MGM Casino breach in Sept, has a policy of only allowing 15 characters or less. Not like anything important is on the line or anything. Oh, they get bonus points for letting me skip the password with a trivial security question! <a href="https://securitycafe.ca/tags/InfoSec" rel="tag">#InfoSec</a> <a href="https://securitycafe.ca/tags/NotAFeature" rel="tag">#NotAFeature</a> <a href="https://infosec.exchange/@boblord">@boblord</a> <a href="https://mastodon.social/@thorsheim">@thorsheim</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/2397970#notice-4738887">In conversation</a><time datetime="2023-12-01T05:43:06+09:00" title="Friday, 01-Dec-2023 05:43:06 JST">Friday, 01-Dec-2023 05:43:06 JST</time> <span>from <span><a href="https://securitycafe.ca/@chetwisniewski/111491638515318543" rel="external" title="Sent from securitycafe.ca via ActivityPub">securitycafe.ca</a></span></span><a href="https://securitycafe.ca/@chetwisniewski/111491638515318543">permalink</a><h4>Attachments</h4><ol><li><label><a rel="external" href="https://gnusocial.jp/attachment/1903907">Please enter 8-15 characters using at least one letter and number. Spaces are not allowed.</a></label><br><a href="https://securitycafe.ca/system/media_attachments/files/111/491/619/473/573/872/original/15904c46b44cb4c7.png" rel="external">https://securitycafe.ca/system/media_attachments/files/111/491/619/473/573/872/original/15904c46b44cb4c7.png</a></li><li><label><a rel="external" href="https://gnusocial.jp/attachment/1903908">Security question dialog on account creation. Includes questions like "What was your high school mascot?" and "What city were you born in?"</a></label><br><a href="https://securitycafe.ca/system/media_attachments/files/111/491/633/581/200/337/original/e0270cb8722a4b80.png" rel="external">https://securitycafe.ca/system/media_attachments/files/111/491/633/581/200/337/original/e0270cb8722a4b80.png</a></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Chester Wisniewski (chetwisniewski@securitycafe.ca)'s status on Friday, 01-Dec-2023 05:43:06 JSTChester Wisniewski
- Bob Lord 🔐 :donor:
- Per Thorsheim
Great! TransUnion, whom I have the pleasure of receiving free credit monitoring from due to the MGM Casino breach in Sept, has a policy of only allowing 15 characters or less. Not like anything important is on the line or anything. Oh, they get bonus points for letting me skip the password with a trivial security question! #InfoSec #NotAFeature @boblord @thorsheim
In conversationFriday, 01-Dec-2023 05:43:06 JST from securitycafe.capermalink
Attachments
1. Please enter 8-15 characters using at least one letter and number. Spaces are not allowed.
  https://securitycafe.ca/system/media_attachments/files/111/491/619/473/573/872/original/15904c46b44cb4c7.png
2. Security question dialog on account creation. Includes questions like "What was your high school mascot?" and "What city were you born in?"
  https://securitycafe.ca/system/media_attachments/files/111/491/633/581/200/337/original/e0270cb8722a4b80.png

Public

Embed Notice

HTML Code

Corresponding Notice