NIST recommendation: remove periodic password change requirements | Hacker News Reader