Dumb Password Rules: Shaming sites with dumb password rules
1–10 of 24 posts
Re: Dumb Password Rules: Shaming sites with dumb password rules
#2The ultimate sin is when a websites app doesn't support a password that the website does. Another favorite is when the change password requirements are higher than whats supported.
Re: Dumb Password Rules: Shaming sites with dumb password rules
#3War is peace, freedom is slavery, ignorance is strength, and reducing the search space makes passwords more secure.
Re: Dumb Password Rules: Shaming sites with dumb password rules
#4A system at my work refuses passwords with consecutive repeating characters: "abcdefghhh" is not valid, "abcdefgh" is valid.
Re: Dumb Password Rules: Shaming sites with dumb password rules
#5The ultimate sin is when a websites app doesn't support a password that the website does. Another favorite is when the change password requirements are higher than whats supported.
Or silently truncating - sure, you submitted 20 chars, but we actually only kept 16... and we won't let your password manager enter all 20...
Re: Dumb Password Rules: Shaming sites with dumb password rules
#6The ultimate sin is when a websites app doesn't support a password that the website does. Another favorite is when the change password requirements are higher than whats supported.
Apps that don't let me at least paste something from my password manager can also fuck right off.
Re: Dumb Password Rules: Shaming sites with dumb password rules
#7E-trade: Your password can’t be >32 chars.
Their 2FA TOTP gets concatenated to the end of your password. Got a >26 char password? You’ll be locked out after enabling 2FA. No worries, though, you just call support, provide your email, and they disable 2FA for you..
Re: Dumb Password Rules: Shaming sites with dumb password rules
#8Thanks Microsoft and lot of other dumbs for not letting me use 'i' character in my passwords, because my email is i@...
Re: Dumb Password Rules: Shaming sites with dumb password rules
#9The ultimate sin is when a websites app doesn't support a password that the website does. Another favorite is when the change password requirements are higher than whats supported.
Apps that don't let me at least paste something from my password manager can also fuck right off.
The government site for purchasing I-bonds requires you to input your password with the mouse using a virtual keyboard.
Re: Dumb Password Rules: Shaming sites with dumb password rules
#10Earlier quoted context omitted.
Apps that don't let me at least paste something from my password manager can also fuck right off.
The government site for purchasing I-bonds requires you to input your password with the mouse using a virtual keyboard.
Truly, sufficiently advanced incompetence is indistinguishable from malice.