Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

NULL license plate not such a bright idea

knrs.iheart.com

Post reply on HN
Print view View original

461–470 of 484 posts

Re: NULL license plate not such a bright idea

#461

Post by [deleted] »

dredmorbius wrote: post #450
mehrdadn wrote: post #337

Earlier quoted context omitted.

That's most definitely not how security works. The strength of your password is not proportional to the number of bits of entropy it has.

The way you're phrasing this may be misleading. The strength of a password / passphrase increases with the power of 2 raised to the bits of entropy. That's an exponential proportion, rather than a linear one. But a proportion all the same. Example: Given mixed-case alphanumeric (62 characters) and an 8-character password length, the number of combinations is: 62^8 = 218,340,105,584,896 (keyspace -- 218 quadrillion) l…

[deleted]

Re: NULL license plate not such a bright idea

#462

Post by Piskvorrr »

taneq wrote: post #398
m463 wrote: post #359

Earlier quoted context omitted.

I saw a car with that specific plate a year or two ago. It seemed like it might work like humor in the TSA line. Fine as long as you have extra time on your hands. I wonder if it has even been towed/impounded?

> Fine as long as you have extra time on your hands. And of course, in programmer humour, this translates to "while you're not busy with anything else, issue a fine." :)

Which, ironically, is what actually happens.

Re: NULL license plate not such a bright idea

#464

Post by dwyerm »

paulborza wrote: post #280
chipperyman573 wrote: post #131

Earlier quoted context omitted.

That link redirects to the DOL homepage.

Thanks for letting me know. Here's the proper link: https://fortress.wa.gov/dol/extdriveses/NoLogon?Link=Persona...

Just out of curiosity, how do you think you missed the rest of the URL?

I have a suspicion that the trend towards browsers being 'helpful' with the URL field is contributing to mistakes like these.

Re: NULL license plate not such a bright idea

#465

Post by MiddleEndian »

Faark wrote: post #440
inopinatus wrote: post #421

Earlier quoted context omitted.

Square Enix's account management on the PS4 allowed me to set a password with a space on the end, but their website strips spaces from the password field when you sign in. Fun fact: it's actually really easy to submit a string with a space on the end when entered via a PS4 controller.

Trimming spaces is the one evil that is kind of necessary. Way to many text selection tools select trailing spaces. Firefox and Chrome both do when selecting words. Got a mail with a reset password and want to copy it over? Yeah, good chance the space is copied as well. On a few occasions even ended up in my password manager. Please, just apply password rules everywhere consistently.

On a semi-related note I once had to help a coworker who couldn't log into a server using an auto-generated password listed like so:

The password is p4ssw()rd.

Turns out they didn't realize the period was part of the password.

Re: NULL license plate not such a bright idea

#466

Post by lysp »

linker3000 wrote: post #132

A colleague used an app's "generate secure password" feature to change their ISP's web portal login - which then also became the WAN router's password - which they didn't realise. It was about a week before the router dropped its connection and needed to re-authenticate - and that's when I was called in to investigate the loss of connectivity - which Windows 10 very unhelpfully reported as the network cable disconnec…

I went to change my password on a forum site that I had not used in a few years. My old password was really weak - think "abc123" or something similar.

I logged in and then attempted to change my password to my new standard of 20+ character upper/lower/symbol. The problem was, they'd upgraded their forum software, and there was a bug that added password strength validation to the "old" password field.

So I was putting in:

Old: abc123 New: sZp10VzIoZI9g143

And was getting the error message "error: your password must be 8+ characters long". After about 10 minutes of frustration and realising they had both client and server validation I went down a similar route as you and used forgot-password even though I knew the password.

Re: NULL license plate not such a bright idea

#467

Post by vageli »

kelnos wrote: post #416
vageli wrote: post #163

Earlier quoted context omitted.

> Court isn't cheap. > You're paying for it with a lawyer or with your own time At some point surely you can countersue for harassment?

For the first time or two, maybe. But you'll be paying for it with hours, possibly tens of hours, of your own free time. And the US legal system is a fickle beast; what seems to you like a slam dunk might not actually be so certain. After the second or third time, the judge will ask, "why didn't you just change your license plate to something else and avoid all this hassle?" And when you answer, "I've grown fond of t…

What do you mean "after the second or third time"?

Are you suggesting that if this person were to sue for the repeated harassment and presumably prevail (with some kind of damages attached) that the behavior would persist?

Re: NULL license plate not such a bright idea

#468

Post by taftster »

MertsA wrote: post #427
taftster wrote: post #353

Earlier quoted context omitted.

I have a 14 character WFC password, seemingly works fine.

Try changing the last two characters and see if it still lets you in. It's not that uncommon that people mix up when to filter input and when to validate it.

Tried and failed (to login). Looks like they are at least validating my entire password.

Re: NULL license plate not such a bright idea

#469

Post by et2o »

foldr wrote: post #439
et2o wrote: post #372

Earlier quoted context omitted.

Possibly didn't want to take you into Brooklyn. The Manhattan side isn't really walkable.

I was already on the Brooklyn side. But the issue was literally that he had no idea what the Brooklyn Bridge was, not the precise drop-off location. (We just wanted to look around Dumbo for a bit.)

Wow! Hard to think of a more iconic landmark in that case.

Re: NULL license plate not such a bright idea

#470

Post by tapland »

close04 wrote: post #173
tapland wrote: post #169

Earlier quoted context omitted.

With how these systems seem to be written, absolutely.

https://hackaday.com/2014/04/04/sql-injection-fools-speed-tr... Another picture (which I can't seem to find now) purportedly showed how one of the screens over the highway was displaying just an error message after triggering this exploit.

Automated its unlikely. I would guess they have a list of allowed characters to OCR to (right? Please!?)

But if entered manually by someone?

Post reply on HN