Comments on: Use PWDCOMPARE() to Find SQL Logins With Weak Passwords https://thomaslarock.com/2019/02/use-pwdcompare-to-find-sql-logins-with-weak-passwords/ Thomas LaRock is an author, speaker, data expert, and SQLRockstar. He helps people connect, learn, and share. Along the way he solves data problems, too. Thu, 02 May 2019 21:59:35 +0000 hourly 1 https://wordpress.org/?v=6.7.1 By: Bala https://thomaslarock.com/2019/02/use-pwdcompare-to-find-sql-logins-with-weak-passwords/#comment-52738 Thu, 02 May 2019 21:59:35 +0000 https://thomaslarock.com/?p=19472#comment-52738 Good tip. Thanks.

]]> By: Use PWDCOMPARE() to Find SQL Logins With Weak Passwords – Thomas LaRock | South Florida SQL Server User Group https://thomaslarock.com/2019/02/use-pwdcompare-to-find-sql-logins-with-weak-passwords/#comment-47197 Fri, 22 Feb 2019 04:04:54 +0000 https://thomaslarock.com/?p=19472#comment-47197 […] Don’t just take my word for it though. Do a quick search for “common password list” and  read more… […]

]]> By: Testing SQL Logins For Weak Passwords – Curated SQL https://thomaslarock.com/2019/02/use-pwdcompare-to-find-sql-logins-with-weak-passwords/#comment-46088 Thu, 07 Feb 2019 13:00:47 +0000 https://thomaslarock.com/?p=19472#comment-46088 […] Tom LaRock shows how you can test SQL authenticated logins for weak passwords using a built-in SQL S…: […]

]]> By: Greg Low https://thomaslarock.com/2019/02/use-pwdcompare-to-find-sql-logins-with-weak-passwords/#comment-46028 Wed, 06 Feb 2019 21:58:01 +0000 https://thomaslarock.com/?p=19472#comment-46028 But enabling the password policy would not actually be a good thing right? It adds auto-password expiry, password complexity rules, etc. Both of these are advised against in the latest NIST guidelines right? https://pages.nist.gov/800-63-3/sp800-63b.html#reqauthtype

]]> By: Thomas LaRock https://thomaslarock.com/2019/02/use-pwdcompare-to-find-sql-logins-with-weak-passwords/#comment-46017 Wed, 06 Feb 2019 19:03:27 +0000 https://thomaslarock.com/?p=19472#comment-46017 In reply to K. Brian Kelley.

Agreed!

]]> By: K. Brian Kelley https://thomaslarock.com/2019/02/use-pwdcompare-to-find-sql-logins-with-weak-passwords/#comment-46013 Wed, 06 Feb 2019 18:34:42 +0000 https://thomaslarock.com/?p=19472#comment-46013 I’m going to append to what you wrote. Yes, data security is hard. But it’s not just because people are dumb. Data security is hard because we don’t take into account the dumbness in building our solutions.

After all, the definition of insanity is doing the same thing over and over again yet expecting different results.

]]>