Electronic Arts Hates Strong Passwords
kaurkuut.com
Electronic Arts Hates Strong Passwords
1–10 of 111 posts
Re: Electronic Arts Hates Strong Passwords
#2Does it matter if they're strong if all they're going to do is md5 them?
Re: Electronic Arts Hates Strong Passwords
#3Does it matter if they're strong if all they're going to do is md5 them?
I always wonder exactly what those types of sites are doing that restricts the valid character set.
I shudder at the thought that this is their way of preventing SQL injections or something like that.
Re: Electronic Arts Hates Strong Passwords
#4The worst example that I've seen has to be the site that could only handle password per {6,12}[A-Za-z0-9] - incredible.
Oh, I remember another one that's just as annoying. This site simply chopped of your password after n characters and it never gave you any kind of warning. Took a lot of troubleshooting to find out the exact position of n.
Re: Electronic Arts Hates Strong Passwords
#5Holy moly, that's really really hard to read agains that background.
Re: Electronic Arts Hates Strong Passwords
#6Holy moly, that's really really hard to read agains that background.
Re: Electronic Arts Hates Strong Passwords
#7The worst example that I've seen has to be the site that could only handle password per {6,12}[A-Za-z0-9] - incredible. Oh, I remember another one that's just as annoying. This site simply chopped of your password after n characters and it never gave you any kind of warning. Took a lot of troubleshooting to find out the exact position of n.
Think about all-numeric PIN style passwords. I have seen banking websites that enforce [0-9]{4,6}
Re: Electronic Arts Hates Strong Passwords
#8Windows Live also has a 16 character, restricted-character limit.
Re: Electronic Arts Hates Strong Passwords
#9I used to work at EA (now doing a YC company), you can change your password here:
Though it doesn't fix any of the encryption limitations that they are using.
Re: Electronic Arts Hates Strong Passwords
#10Windows Live also has a 16 character, restricted-character limit.
Even worse, if I remember correctly they silently truncate passwords longer than 16 characters. I wasted nearly an hour trying to log in when they started doing that.