Amex Password Policies Declared Brain-Dead
- Monday, February 8, 2010, 10:59
- Threat Research
- 6 views
I was reminded today of a problem I noticed long ago: American Express's policies for passwords for their customer logins require weak passwords: I quote:Your Password should:Contain 6 to 8 characters - at least one letter and one number (not case sensitive)Contain no spaces or special characters (e.g., &, >, *, $, @)Be different from your User ID and your last PasswordClick the nearby image to see it also. Then I saw on twice-refried news that the author there complained to Amex about this and got a ...