Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

NULL license plate not such a bright idea

knrs.iheart.com

Post reply on HN
Print view View original

421–430 of 484 posts

Re: NULL license plate not such a bright idea

#421

Post by inopinatus »

cgriswald wrote: post #236
linker3000 wrote: post #132

A colleague used an app's "generate secure password" feature to change their ISP's web portal login - which then also became the WAN router's password - which they didn't realise. It was about a week before the router dropped its connection and needed to re-authenticate - and that's when I was called in to investigate the loss of connectivity - which Windows 10 very unhelpfully reported as the network cable disconnec…

Many, many websites will happily accept passwords of $X characters and then hash only $(X-Y) characters on registration, but try to hash all $X characters on login, so of course the hashes don’t match. And at no point do they tell you the maximum number of characters.

Square Enix's account management on the PS4 allowed me to set a password with a space on the end, but their website strips spaces from the password field when you sign in.

Fun fact: it's actually really easy to submit a string with a space on the end when entered via a PS4 controller.

Re: NULL license plate not such a bright idea

#422

Post by [deleted] »

linker3000 wrote: post #132

A colleague used an app's "generate secure password" feature to change their ISP's web portal login - which then also became the WAN router's password - which they didn't realise. It was about a week before the router dropped its connection and needed to re-authenticate - and that's when I was called in to investigate the loss of connectivity - which Windows 10 very unhelpfully reported as the network cable disconnec…

[deleted]

Re: NULL license plate not such a bright idea

#424

Post by lawnchair_larry »

megaremote wrote: post #364
cronix wrote: post #135

Earlier quoted context omitted.

All we had to do was register our cars in each others names. When I was married, my car was registered to her and vice versa. The redlight/photoradar laws in my state required that the company operating the devices had to match the pic of the driver violating the law, to the pic of the registered owner via the license plate. If they couldn't match them, no ticket was issued as you can't prove who was driving. That's…

So, you were just running red lights, and you think this is a hack worth bragging about?

It is, that’s a great hack

Re: NULL license plate not such a bright idea

#425

Post by jacobush »

lifeisstillgood wrote: post #319

I presume this is already on thread but Irish police conducted a manhunt for serial traffic offender "Prawo Jazdy" - till they realised that was "Driving License" in Polish https://www.telegraph.co.uk/news/worldnews/europe/ireland/47...

I need to change my name to that

Re: NULL license plate not such a bright idea

#426

Post by lifeisstillgood »

jacobush wrote: post #425
lifeisstillgood wrote: post #319

I presume this is already on thread but Irish police conducted a manhunt for serial traffic offender "Prawo Jazdy" - till they realised that was "Driving License" in Polish https://www.telegraph.co.uk/news/worldnews/europe/ireland/47...

I need to change my name to that

Guarenteeing you get chased for hundreds of other people's Traffic violation fines?

Re: NULL license plate not such a bright idea

#427

Post by MertsA »

taftster wrote: post #353
jtc331 wrote: post #303

Earlier quoted context omitted.

Wells Fargo’s is 12 IIRC.

I have a 14 character WFC password, seemingly works fine.

Try changing the last two characters and see if it still lets you in. It's not that uncommon that people mix up when to filter input and when to validate it.

Re: NULL license plate not such a bright idea

#428

Post by Xelbair »

k_sze wrote: post #378
nvplates wrote: post #331

Earlier quoted context omitted.

It has happened multiple times. NULL, NV, XXX, MISSING, NO PLATE

I wonder if the system is also vulnerable to SQL injection via vanity plates.

https://www.wykop.pl/cdn/c3201142/comment_ybs5JJhpdoduaAiCGo...

Re: NULL license plate not such a bright idea

#429

Post by jmchuster »

the-dude wrote: post #46

I once had a product owner for a student/university web app who complained that for a particular user, their lastname was displayed as 'None'. This was a Python project and the product owner apparently already had learned 'None' equals NULL. I dug into the file which we used to import the users from and discovered the user's lastname actually was 'None'.

There was a manager i worked with whose last name was "Null". She complained that every few months her account would get wiped from the HR system.

Re: NULL license plate not such a bright idea

#430

Post by skgoa »

k_sze wrote: post #378
nvplates wrote: post #331

Earlier quoted context omitted.

It has happened multiple times. NULL, NV, XXX, MISSING, NO PLATE

I wonder if the system is also vulnerable to SQL injection via vanity plates.

There was someone who not too long ago fixed an SQL injecction to his front bumper and it managed to break the automated toll collection system.
Post reply on HN