{"id":35582,"date":"2019-10-31T22:05:11","date_gmt":"2019-10-31T19:05:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya\/"},"modified":"2019-10-31T22:05:11","modified_gmt":"2019-10-31T19:05:11","slug":"periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya","title":{"rendered":"Schimbarea periodic\u0103 a parolelor este o practic\u0103 \u00eenvechit\u0103, a venit timpul s\u0103 renun\u021b\u0103m la ea.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen multe sisteme IT exist\u0103 regula obligatorie de schimbare periodic\u0103 a parolelor. Aceasta este, probabil, cea mai ur\u00e2t\u0103 \u0219i cea mai inutil\u0103 cerin\u021b\u0103 a sistemelor de securitate. Unii utilizatori, ca un hack, pur \u0219i simplu schimb\u0103 cifra de la sf\u00e2r\u0219it.<\/p>\n

Aceast\u0103 practic\u0103 a generat numeroase nepl\u0103ceri. Cu toate acestea, oamenii au trebuit s\u0103 supun\u0103, pentru c\u0103 aceasta era pentru securitate<\/i>. Acum acest sfat nu mai este deloc actual. \u00cen mai 2019, chiar \u0219i compania Microsoft a eliminat \u00een cele din urm\u0103 cerin\u021ba de schimbare periodic\u0103 a parolelor din nivelul de baz\u0103 al cerin\u021belor de securitate pentru versiunile personale \u0219i servere ale Windows 10: iat\u0103 declara\u021bia oficial\u0103 \u00een blog<\/a><\/noindex> cu lista modific\u0103rilor pentru versiunea Windows 10 v 1903 (observa\u021bi fraza Eliminarea politicilor de expirare a parolei care cer schimb\u0103ri periodice ale parolelor<\/i>). Reglement\u0103rile \u0219i politicile sistemului Windows 10 Version 1903 \u0219i Windows Server 2019 Security Baseline<\/i> sunt incluse \u00een pachetul Microsoft Security Compliance Toolkit 1.0<\/a><\/noindex>.<\/p>\n

Pute\u021bi ar\u0103ta aceste documente superiorilor \u0219i s\u0103 spune\u021bi: vremurile s-au schimbat. Schimbarea obligatorie a parolelor este un arhaism, acum este practic oficial. Chiar \u0219i auditul de securitate nu va verifica aceast\u0103 cerin\u021b\u0103 (dac\u0103 se bazeaz\u0103 pe regulile oficiale pentru protec\u021bia de baz\u0103 a computerelor cu Windows).
\n<\/a><\/noindex>
\n\"Schimbarea
\nFragment din lista cu politicile de securitate de baz\u0103 Windows 10 v1809 \u0219i modific\u0103rile din 1903, unde politicile corespunz\u0103toare pentru durata de valabilitate a parolelor nu mai sunt aplicabile. Apropo, \u00een noua versiune sunt anulate de asemenea conturile de administrator \u0219i de invitat \u00een mod implicit<\/i><\/p>\n

Microsoft explic\u0103 pe \u00een\u021belesul tuturor \u00een blogul s\u0103u de ce a renun\u021bat la regula schimb\u0103rii obligatorii a parolelor: \u201eExpirarea periodic\u0103 a parolei reprezint\u0103 o protec\u021bie doar \u00eempotriva probabilit\u0103\u021bii ca parola (sau hash-ul) s\u0103 fie furat\u0103 pe durata ei de valabilitate \u0219i folosit\u0103 de o persoan\u0103 neautorizat\u0103. Dac\u0103 parola nu este furat\u0103, nu are sens s\u0103 o schimbi. \u0218i dac\u0103 ave\u021bi dovezi c\u0103 parola a fost furat\u0103, evident c\u0103 ve\u021bi dori s\u0103 ac\u021biona\u021bi imediat, nu s\u0103 a\u0219tepta\u021bi expirarea acesteia pentru a rezolva problema.\u201d<\/p>\n

Apoi Microsoft explic\u0103 c\u0103, \u00een condi\u021biile actuale, este gre\u0219it s\u0103 te protejezi de furtul parolelor \u00een acest mod: \u201eDac\u0103 se \u0219tie c\u0103 parola va fi, probabil, furat\u0103, c\u00e2t de multe zile reprezint\u0103 un interval acceptabil pentru a permite ho\u021bului s\u0103 foloseasc\u0103 aceast\u0103 parol\u0103 furat\u0103? Valoarea implicit\u0103 este de 42 de zile. Nu vi se pare c\u0103 ar fi un timp absurd de lung? \u00centr-adev\u0103r, este foarte mult, \u0219i totu\u0219i indicatorul nostru de baz\u0103 actual a fost stabilit la 60 de zile - mai devreme era de 90 de zile - pentru c\u0103 impunerea unei expir\u0103ri frecvente creeaz\u0103 propriile probleme. \u0218i dac\u0103 parola nu va fi neap\u0103rat furat\u0103, atunci dob\u00e2ndi\u021bi aceste probleme f\u0103r\u0103 niciun beneficiu. \u00cen plus, dac\u0103 utilizatorii dvs. sunt dispu\u0219i s\u0103 schimbe parola pe o bomboan\u0103, nicio politic\u0103 de expirare a parolelor nu va ajuta.\u201d<\/p>\n

Alternativ\u0103<\/h1>\n

\nMicrosoft scrie c\u0103 politicile sale de baz\u0103 privind securitatea sunt concepute pentru a fi utilizate de \u00eentreprinderi bine gestionate, care au grij\u0103 de securitate. Ele sunt, de asemenea, men\u021bionate ca fiind un ghid pentru auditori. Dac\u0103 o astfel de organiza\u021bie a implementat liste cu parole interzise, autentificare multifactorial\u0103, detectarea atacurilor prin for\u021b\u0103 brut\u0103 \u0219i detectarea \u00eencerc\u0103rilor anormale de conectare, este necesar\u0103 expirarea periodic\u0103 a parolelor? \u0218i dac\u0103 nu au implementat metodele moderne de protec\u021bie, expirarea parolelor le va fi de folos?<\/p>\n

Logica Microsoft este surprinz\u0103tor de conving\u0103toare. Avem dou\u0103 op\u021biuni:<\/p>\n

    \n
  1. Compania a implementat m\u0103suri moderne de protec\u021bie.\n<\/li>\n
  2. Compania nu<\/i> a implementat m\u0103suri moderne de protec\u021bie.<\/li>\n<\/ol>\n

    \n\u00cen primul caz, schimbarea periodic\u0103 a parolei nu aduce beneficii suplimentare.<\/p>\n

    \u00cen al doilea caz, schimbarea periodic\u0103 a parolei este inutil\u0103.<\/p>\n

    Astfel, \u00een locul expir\u0103rii parolei, ar trebui folosit, \u00een primul r\u00e2nd, autentificarea multifactorial\u0103<\/b>. M\u0103suri suplimentare de protec\u021bie sunt enumerate mai sus: liste cu parole interzise, detectarea atacurilor prin for\u021b\u0103 brut\u0103 \u0219i alte \u00eencerc\u0103ri anormale de conectare.<\/p>\n

    \u00abExpirarea periodic\u0103 a parolei este o m\u0103sur\u0103 de protec\u021bie veche \u0219i \u00eenvechit\u0103.<\/i>, \u2014 concluzione Microsoft, \u2014 \u0219i nu consider\u0103m c\u0103 pentru nivelul nostru de protec\u021bie de baz\u0103 ar trebui aplicat un anumit standard. Elimin\u00e2ndu-l din nivelul nostru de baz\u0103, organiza\u021biile pot alege ceea ce se potrive\u0219te cel mai bine nevoilor lor presupuse, f\u0103r\u0103 a contraveni recomand\u0103rilor noastre.<\/p>\n

    Ie\u0219ire<\/h1>\n

    \nDac\u0103 o companie oblig\u0103 ast\u0103zi utilizatorii s\u0103 schimbe periodic parolele, ce ar putea s\u0103 cread\u0103 un observator extern?<\/p>\n

      \n
    1. Datele problemei:<\/b> compania utilizeaz\u0103 un mecanism de protec\u021bie \u00eenvechit.\n<\/li>\n
    2. Presupunere:<\/b> compania nu a implementat mecanisme de protec\u021bie moderne.\n<\/li>\n
    3. Concluzie:<\/b> aceste parole sunt mai u\u0219or de ob\u021binut \u0219i utilizat.<\/li>\n<\/ol>\n

      \nRezult\u0103 c\u0103 schimbarea periodic\u0103 a parolelor face compania o \u021bint\u0103 mai atractiv\u0103 pentru atacuri.<\/p>\n

      \n\"Schimbarea
      \n<\/a><\/noindex>
      \n
      Sursa:       habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

      \u0412\u043e \u043c\u043d\u043e\u0433\u0438\u0445 IT-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u043e\u043b\u0435\u0439. \u042d\u0442\u043e, \u043f\u043e\u0436\u0430\u043b\u0443\u0439, \u0441\u0430\u043c\u043e\u0435 \u043d\u0435\u043d\u0430\u0432\u0438\u0441\u0442\u043d\u043e\u0435 \u0438 \u0441\u0430\u043c\u043e\u0435 \u0431\u0435\u0441\u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043b\u0430\u0439\u0444\u0445\u0430\u043a\u0430 \u043f\u0440\u043e\u0441\u0442\u043e \u043c\u0435\u043d\u044f\u044e\u0442 \u0446\u0438\u0444\u0440\u0443 \u0432 \u043a\u043e\u043d\u0446\u0435. \u0422\u0430\u043a\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430 \u0432\u044b\u0437\u044b\u0432\u0430\u043b\u0430 \u043c\u0430\u0441\u0441\u0443 \u043d\u0435\u0443\u0434\u043e\u0431\u0441\u0442\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u043b\u044e\u0434\u044f\u043c \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u0442\u0435\u0440\u043f\u0435\u0442\u044c, \u0432\u0435\u0434\u044c \u044d\u0442\u043e \u0440\u0430\u0434\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0422\u0435\u043f\u0435\u0440\u044c \u044d\u0442\u043e\u0442 \u0441\u043e\u0432\u0435\u0442 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u043d\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u0435\u043d. \u0412 \u043c\u0430\u0435 2019 \u0433\u043e\u0434\u0430 \u0434\u0430\u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-35582","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Schimbarea periodic\u0103 a parolelor \u2013 o practic\u0103 \u00eenvechit\u0103, este timpul s\u0103 \u00eei punem cap\u0103t | ProHoster","description":"\u00cen multe sisteme IT, exist\u0103 o regul\u0103 obligatorie de schimbare periodic\u0103 a parolelor. Aceasta este, poate, cea mai ur\u00e2t\u0103 \u0219i cea mai inutil\u0103 cerin\u021b\u0103 a sistemelor de securitate.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0441\u043c\u0435\u043d\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u2014 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430, \u043f\u0440\u0438\u0448\u043b\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u0442 \u043d\u0435\u0451 \u043e\u0442\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f | ProHoster","og:description":"\u0412\u043e \u043c\u043d\u043e\u0433\u0438\u0445 IT-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u043e\u043b\u0435\u0439. \u042d\u0442\u043e, \u043f\u043e\u0436\u0430\u043b\u0443\u0439, \u0441\u0430\u043c\u043e\u0435 \u043d\u0435\u043d\u0430\u0432\u0438\u0441\u0442\u043d\u043e\u0435 \u0438 \u0441\u0430\u043c\u043e\u0435 \u0431\u0435\u0441\u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:05:11+00:00","article:modified_time":"2019-10-31T19:05:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35582","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 23:52:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 23:11:37","updated":"2026-01-21 23:52:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/35582","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=35582"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/35582\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=35582"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=35582"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=35582"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}