Blog|Login|Chinese German Japanese|Follow @imperva
February 13, 2009
 Shoot, Don't Talk
The following text is taken from some company's press release (names removed to protect the innocent):

Application security has been strengthened by adjusting the minimum requirements for PINs and passwords within The <product name>® <Version>....

IMHO, when it comes to application security, adjusting the minimum requirements for PINs and passwords will not change the security of the application. It might make it more difficult to unauthorized individuals the gain access to the UI, but definitely it will not change the security state of the application.  

Paraphrasing Tuco, If you need to secure your applications, do something about it. 

 


Comments

Verify your Comment

Previewing your Comment

This is only a preview. Your comment has not yet been posted.

Working...
Your comment could not be posted. Error type:
Your comment has been saved. Comments are moderated and will not appear until approved by the author. Post another comment

The letters and numbers you entered did not match the image. Please try again.

As a final step before posting your comment, enter the letters and numbers you see in the image below. This prevents automated programs from posting comments.

Having trouble reading this image? View an alternate.

Working...

Post a comment

Comments are moderated, and will not appear until the author has approved them.

« Podcast Interview with John P. Pironti | Main | That's Black(e-)mail! »