111–120 of 278 posts
doesn't that mean they are storing plain text/reversible encrypted passwords? I have gmail and facebook accounts way before mobile was invented, if they've added that feature for mobile imho it means password was stored in plain text or with 2 way encryption
doesn't that mean they are storing plain text/reversible encrypted passwords? I have gmail and facebook accounts way before mobile was invented, if they've added that feature for mobile imho it means password was stored in plain text or with 2 way encryption
So many sites require "at least one uppercase letter" and a "special character" and people use the same password for everything. I wonder how many passwords have the first letter uppercase because that's easy to remember. And then a trailing "!" because it's the first one you see. Not that I would ever do that.
I just stick an "A!" on the end of my otherwise complex password to satisfy these stupid rules. The worst is when they don't even allow spaces.
- At least one upper case
- At least one lower case
- At least one number, but not as the first character and no two numbers in a row
- No special characters
- Maximum characters: 8
There was a minimum too but I can’t recall what it was. Hopefully 7 for maximum security.
My randomly generated password from my password manager got a “medium” on their strength scale.
doesn't that mean they are storing plain text/reversible encrypted passwords? I have gmail and facebook accounts way before mobile was invented, if they've added that feature for mobile imho it means password was stored in plain text or with 2 way encryption
doesn't that mean they are storing plain text/reversible encrypted passwords? I have gmail and facebook accounts way before mobile was invented, if they've added that feature for mobile imho it means password was stored in plain text or with 2 way encryption
You just store multiple hashes, and don't support it retroactively
That's a nice feature. It got me thinking - imagine wanting to let users log in with a single character typo in their password, could you do this without storing hashes of all edit distance 1 passwords?
Hijacking this thread to say Batlle.net/Blizzard passwords are case insensitive altogether
So many sites require "at least one uppercase letter" and a "special character" and people use the same password for everything. I wonder how many passwords have the first letter uppercase because that's easy to remember. And then a trailing "!" because it's the first one you see. Not that I would ever do that.
I just stick an "A!" on the end of my otherwise complex password to satisfy these stupid rules. The worst is when they don't even allow spaces.
So "Pasword1234#" was "strong" password, but "ha_ivrkbs(i5HzJzee%Ii3jsk#7jaot" was considered weak - note "ee" in the middle of string.
I just want a phone number input box that will strip dashes for me. Many go to the effort of having an error message pop up that says "no dashes or parentheses allowed." So they went to the effort of writing special case code to notice and handle this ... by giving instructions to the person, instead of the computer.
This is like when on a cli application -h displays a hint that you probably meant --help (or the other way around). If you already know someone wants to display the help, why not just display it?
https://news.ycombinator.com/item?id=21862160
There's a much more evil prank than that:
A user was having a really bizarre problem: They could log in when they were sitting down in a seat in front of the keyboard, but when they were standing in front of the keyboard, their password didn't work! The problem happened every time, so they called for support, who finally figured it out after watching them demonstrate the problem many times:
It turned out that some joker had rearranged the numbers keys on the keyboard, so they were ordered "0123456789" instead of "1234567890". And the user's password had a digit in it. When the user was sitting down comfortably in front of the keyboard, they looked at the screen while they touch-typed their password, and were able to log in. But when they were standing in front of the computer, they looked at the keyboard and pressed the numbers they saw, which were wrong!