Air France requires account password to be between 4 and 6 characters
1–10 of 11 posts
Re: Air France requires account password to be between 4 and 6 characters
#2For a long time Schwab.com also had an absurd policy like this - but the username on the account could be 3X longer, and contain special chars...
Re: Air France requires account password to be between 4 and 6 characters
#3between 4 and 6 is characters is pretty bad, but only numbers as well? Thats begging to be brute force.
Re: Air France requires account password to be between 4 and 6 characters
#4Just going to go ahead and assume that Air France is using this to harvest bank account pins and luggage combinations in a creative bid to ensure they meet revenue projections this year.
Re: Air France requires account password to be between 4 and 6 characters
#5between 4 and 6 is characters is pretty bad, but only numbers as well? Thats begging to be brute force.
Well even 4 numbers of 10,000 combinations. Say they lock the account out after 100 wrong attempts (hopefully), then assuming you don't choose 1234 or 0000 then you're pretty safe from a brute force attack.
I'm guessing they require this so you can type it in over the phone, that's the only sensible reason I can think of.
Re: Air France requires account password to be between 4 and 6 characters
#6Re: Air France requires account password to be between 4 and 6 characters
#7Many companies that have heavy phone support call in usage do this, so you can easily enter the password over the phone keypad.
Re: Air France requires account password to be between 4 and 6 characters
#8between 4 and 6 is characters is pretty bad, but only numbers as well? Thats begging to be brute force.
Well even 4 numbers of 10,000 combinations. Say they lock the account out after 100 wrong attempts (hopefully), then assuming you don't choose 1234 or 0000 then you're pretty safe from a brute force attack. I'm guessing they require this so you can type it in over the phone, that's the only sensible reason I can think of.
This is not safe at all. If you do this with a hundred accounts, you're likely to hack at least one.
Re: Air France requires account password to be between 4 and 6 characters
#9Earlier quoted context omitted.
Well even 4 numbers of 10,000 combinations. Say they lock the account out after 100 wrong attempts (hopefully), then assuming you don't choose 1234 or 0000 then you're pretty safe from a brute force attack. I'm guessing they require this so you can type it in over the phone, that's the only sensible reason I can think of.
This is not safe at all. If you do this with a hundred accounts, you're likely to hack at least one.
It is safe for the individual accounts. Like a zebra in a zeal.
Re: Air France requires account password to be between 4 and 6 characters
#10Verizon is the same way. 5 characters.