{"action":"closed","issue":{"url":"https://api.github.com/repos/usnistgov/800-63-3/issues/263","repository_url":"https://api.github.com/repos/usnistgov/800-63-3","labels_url":"https://api.github.com/repos/usnistgov/800-63-3/issues/263/labels{/name}","comments_url":"https://api.github.com/repos/usnistgov/800-63-3/issues/263/comments","events_url":"https://api.github.com/repos/usnistgov/800-63-3/issues/263/events","html_url":"https://github.com/usnistgov/800-63-3/issues/263","id":172230048,"number":263,"title":"Shoulder surfing ","user":{"login":"KantaraInitiative-IAWG","id":21131756,"avatar_url":"https://avatars.githubusercontent.com/u/21131756?v=3","gravatar_id":"","url":"https://api.github.com/users/KantaraInitiative-IAWG","html_url":"https://github.com/KantaraInitiative-IAWG","followers_url":"https://api.github.com/users/KantaraInitiative-IAWG/followers","following_url":"https://api.github.com/users/KantaraInitiative-IAWG/following{/other_user}","gists_url":"https://api.github.com/users/KantaraInitiative-IAWG/gists{/gist_id}","starred_url":"https://api.github.com/users/KantaraInitiative-IAWG/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/KantaraInitiative-IAWG/subscriptions","organizations_url":"https://api.github.com/users/KantaraInitiative-IAWG/orgs","repos_url":"https://api.github.com/users/KantaraInitiative-IAWG/repos","events_url":"https://api.github.com/users/KantaraInitiative-IAWG/events{/privacy}","received_events_url":"https://api.github.com/users/KantaraInitiative-IAWG/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/usnistgov/800-63-3/labels/63B","name":"63B","color":"c5def5"},{"url":"https://api.github.com/repos/usnistgov/800-63-3/labels/accepted","name":"accepted","color":"0e8a16"}],"state":"closed","locked":false,"assignee":{"login":"jimfenton","id":1020212,"avatar_url":"https://avatars.githubusercontent.com/u/1020212?v=3","gravatar_id":"","url":"https://api.github.com/users/jimfenton","html_url":"https://github.com/jimfenton","followers_url":"https://api.github.com/users/jimfenton/followers","following_url":"https://api.github.com/users/jimfenton/following{/other_user}","gists_url":"https://api.github.com/users/jimfenton/gists{/gist_id}","starred_url":"https://api.github.com/users/jimfenton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jimfenton/subscriptions","organizations_url":"https://api.github.com/users/jimfenton/orgs","repos_url":"https://api.github.com/users/jimfenton/repos","events_url":"https://api.github.com/users/jimfenton/events{/privacy}","received_events_url":"https://api.github.com/users/jimfenton/received_events","type":"User","site_admin":false},"assignees":[{"login":"jimfenton","id":1020212,"avatar_url":"https://avatars.githubusercontent.com/u/1020212?v=3","gravatar_id":"","url":"https://api.github.com/users/jimfenton","html_url":"https://github.com/jimfenton","followers_url":"https://api.github.com/users/jimfenton/followers","following_url":"https://api.github.com/users/jimfenton/following{/other_user}","gists_url":"https://api.github.com/users/jimfenton/gists{/gist_id}","starred_url":"https://api.github.com/users/jimfenton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jimfenton/subscriptions","organizations_url":"https://api.github.com/users/jimfenton/orgs","repos_url":"https://api.github.com/users/jimfenton/repos","events_url":"https://api.github.com/users/jimfenton/events{/privacy}","received_events_url":"https://api.github.com/users/jimfenton/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/usnistgov/800-63-3/milestones/4","html_url":"https://github.com/usnistgov/800-63-3/milestones/Iteration%204","labels_url":"https://api.github.com/repos/usnistgov/800-63-3/milestones/4/labels","id":1742377,"number":4,"title":"Iteration 4","description":"","creator":{"login":"pgrassi-nist","id":13986911,"avatar_url":"https://avatars.githubusercontent.com/u/13986911?v=3","gravatar_id":"","url":"https://api.github.com/users/pgrassi-nist","html_url":"https://github.com/pgrassi-nist","followers_url":"https://api.github.com/users/pgrassi-nist/followers","following_url":"https://api.github.com/users/pgrassi-nist/following{/other_user}","gists_url":"https://api.github.com/users/pgrassi-nist/gists{/gist_id}","starred_url":"https://api.github.com/users/pgrassi-nist/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pgrassi-nist/subscriptions","organizations_url":"https://api.github.com/users/pgrassi-nist/orgs","repos_url":"https://api.github.com/users/pgrassi-nist/repos","events_url":"https://api.github.com/users/pgrassi-nist/events{/privacy}","received_events_url":"https://api.github.com/users/pgrassi-nist/received_events","type":"User","site_admin":false},"open_issues":19,"closed_issues":41,"state":"open","created_at":"2016-05-02T13:07:42Z","updated_at":"2016-09-15T00:14:41Z","due_on":"2016-09-17T04:00:00Z","closed_at":null},"comments":1,"created_at":"2016-08-19T22:10:06Z","updated_at":"2016-09-15T00:14:41Z","closed_at":"2016-09-15T00:14:41Z","body":"**Organization**: Kantara Initiative\r\n\r\n**Type**: 2\r\n\r\n**Document (63-3, 63A, 63B, or 63C)**:  SP 800-63B\r\n\r\n**Reference (Include section and paragraph number)**: \r\nSection Appendix A Item A.1 - Strength of Memorized Secrets\r\n\r\n(KI Ref: KI/ADG#21)\r\n\r\n**Comment (Include rationale for comment)**: \r\nThere's an observation that \"shoulder surfing\" attacks are only slightly more difficult for complex passwords, is there a citation for this claim? It would seem would think that requiring mixed case passwords means that the attacker must observe multiple fingers on the keyboard at once, for example.  \r\n\r\n**Suggested Change**: \r\nRemove the shoulder surfing explanation or provide citation for the information.\r\n"}}
{"actor":{"display_login":"jricher"}}