take that PCI!

Oct 01, 2009 10:36

fuck PCI up the nose.

my bank started using the PCI standards of "change your password every 90 days" and "can't use any of the previous past 4 passwords"
(okay. making account holders change their accounts that often isnt in the spec, but that's still their idea of password security)

since i access it all of once a month, it took me a bit to figure out that i had changed it
enough that i didnt remember in time for it to be locked out

and because the bank is crazier than the PCI spec, they permanently lock it out, i think, instead of just for 30 minutes

thus, every time i've wanted to access my account since this started, i ended up having to call to have it unlocked

so i just spent i don't know how long going through changing my password to something different 4 times
just so i can get it back to the one it was

i don't buy the security in changing a password every 90 days
it just leads to passwords being stuck to screens
left in wallets and other things

i dont mind so much the "hey, you're using a different commercial than usual, you need to answer more questions"
i think use trends like that are more useful than frequent password changes

Previous post Next post
Up