What 'Have I been Pwned?' taught DHS’s internal cyber chief about passwords

guest · Jan 28, 2020

What 'Have I been Pwned?' taught DHS’s internal cyber chief about passwords
January 28, 2020
https://www.cyberscoop.com/dhs-passwords-zero-trust-duo/

A website that informs users if their email address has been swept up in a data breach isn’t just popular with vigilant business owners or private security sleuths.

The man charged with protecting the Department of Homeland Security’s systems from hackers also maintains an account on the “Have I been Pwned?” website, and it regularly reminds him of the risks passwords pose.

“I get emails from this website on a monthly or basis,” DHS CISO Paul Beckman said Tuesday at the Zero Trust Security Summit presented by Duo and produced by FedScoop and CyberScoop. “That’s how often my username and password is getting compromised.”
The good news for him is that he uses a “second factor” — something like a SMS message or an authentication app — to log into his accounts and keep hackers out of them.

The anecdote shows the security mess that, some security professionals argue, passwords have wrought, and how one more layer of verification can be a saving grace.
Click to expand...

Log in or Sign up

What 'Have I been Pwned?' taught DHS’s internal cyber chief about passwords

guest Guest

Log in or Sign up

What 'Have I been Pwned?' taught DHS’s internal cyber chief about passwords

guest Guest

Useful Searches