You normally expected that the FBI provides us with the most effective safety tips but a tweet recently issued by the Bureau makes many security experts raise their eyebrows and wonder who is actually behind these posts.
FBI takes Twitter to post safety tips
Specifically, the FBI tweeted on November 25 a piece of advice that is supposed to help people stay safe during the holiday season when cybercriminals are also very busy trying to steal our information.
"Shopping online this holiday season? Keep your accounts secure, use passwords and change them frequently, "wrote the FBI. And while keeping accounts secure and using passwords are indeed good recommendations, it is the last part that caused controversy. Changing passwords frequently has often been described as a bad practice especially because doing this repeatedly can possibly lead to users turning to easy-to-remember passwords that can be quickly compromised by hackers. In addition, it has been proven that companies are forcing their employees to change their passwords on a frequent basis are actually more exposed because of the same reasons: workers end up using simple passwords that are easier to remember , And this can not lead to anything good.
Security experts say "No"
Security experts have questioned the FBI tweets, and one of those who recommended exactly the opposite is Per Thorsheim, who founded his own password conference to discuss the importance of passwords. In a statement for the motherboard, Thorsheim explained that changing passwords frequently is something you should not do and there are other ways to stay secure online. "I am surprised and sad to see that the FBI continues to give bad advice when solid academic research, many organizations, businesses and the US government themselves have said for at least a year and a half now that Changing your passwords frequently is a bad idea, "he said. "Although I do not know who the FBI is in control of their Twitter account, the people behind it do not seem to be in control of current best practices. I hope better than the FBI ". So how exactly can you protect yourself online without changing passwords frequently? The best way to do this is to use a password manager that can help generate complex passwords that are difficult to make compromises. Also, be sure to enable two-factor authentication whenever possible, and avoid using the same password for more than one service.
0 comments:
Post a Comment