dbaplus Community
Sep 12, 2026 · Information Security
Bill Burr's 2003 Password Rules Were Wrong: He Apologized in 2017
The article traces mandatory complex password rules to Bill Burr's 2003 NIST guide based on a 1980s paper, reveals how they create predictable patterns, cites xkcd's entropy comparison, and notes Burr's 2017 regret and NIST's updated guidelines, yet many sites still enforce the outdated rules.
Bill BurrNISTauthentication
0 likes · 7 min read