Live data from Hacker News

T-mobile password reset does not allow you to type the letter "V"

support.t-mobile.com

61–70 of 85 posts

Re: T-mobile password reset does not allow you to type the letter "V"

#61
post #44

This might be a good place to complain about -ed out passwords on mobile phones. It makes it next to impossible to enter a password(yes the last letter not -ed out for a few seconds only helps a tiny bit). If I'm not copy-pasting from keepass I'm entering the password in the login field then cut/paste it.

[deleted]

Re: T-mobile password reset does not allow you to type the letter "V"

#62
post #44

This might be a good place to complain about -ed out passwords on mobile phones. It makes it next to impossible to enter a password(yes the last letter not -ed out for a few seconds only helps a tiny bit). If I'm not copy-pasting from keepass I'm entering the password in the login field then cut/paste it.

starred out. markup ate starts.

Re: T-mobile password reset does not allow you to type the letter "V"

#64
post #32
post #31

Earlier quoted context omitted.

I wonder if Shift+Insert works... (is that only a Linux thing?) Or Rt-Click -> Paste.

To say nothing about right click - paste... unless they're doing the 1999 thing and blocking right click too (and if they are, hopefully it's with a 1999-tastic alert("Right click not allowed!");).

Or click field. Go to the menu option Edit -> Paste. Let's see how they are going to dodge that with Javascript?

Re: T-mobile password reset does not allow you to type the letter "V"

#65
post #24

also interesting is that t-mo will truncate any password at 15 characters without warning and then only accept 15 upon login.. At least that was the state of things about 2 weeks ago

My guess - varchar(15)

Adobe does the same thing with the horrible license-management selfcare site. Which, as far as I can tell, is some kind of SAP frontend.

Re: T-mobile password reset does not allow you to type the letter "V"

#66

Earlier quoted context omitted.

Please, in the future, whenever talking about PCI compliance, cite chapter and verse. There's more than enough wild speculation running around about it, all sorts of myths are repeated and propagated.

I asked a GetGamesGo employee about the pasting issue and that is what he told me. Let me get the full quote: "Cut/paste passwords – that’s a stipulation of PCI compliance. We could scrap it, but they ask for it. We have to be PCI compliant on card processing." I provided as much information as I had available, I do not know the chapter/verse. Apologies if I spread any misinformation, I took this rep at his word.

I have spent a fair bit of time reading the PCI standards and I have never seen such a requirement. I suppose it is possible that some sort of independent auditor is making that call but it isn't in the standard anywhere I can see. (Auditors seem to have a huge amount of discretion here.)

Re: T-mobile password reset does not allow you to type the letter "V"

#67
post #31

Earlier quoted context omitted.

I wonder if Shift+Insert works... (is that only a Linux thing?) Or Rt-Click -> Paste.

In Linux selecting text and middle-click has saved me countless times

I would like to write some company that does this and say "control V doesn't work but I can paste the password in using the following methods.... this is a problem because it keeps me from using proper security for passwords on my clipboard. Can you please fix? PS Can I follow up with your PCI auditor directly?"

Re: T-mobile password reset does not allow you to type the letter "V"

#68
post #65
post #24

also interesting is that t-mo will truncate any password at 15 characters without warning and then only accept 15 upon login.. At least that was the state of things about 2 weeks ago

My guess - varchar(15) Adobe does the same thing with the horrible license-management selfcare site. Which, as far as I can tell, is some kind of SAP frontend.

And MySQL? ;-)

Re: T-mobile password reset does not allow you to type the letter "V"

#69
post #65

Earlier quoted context omitted.

My guess - varchar(15) Adobe does the same thing with the horrible license-management selfcare site. Which, as far as I can tell, is some kind of SAP frontend.

And MySQL? ;-)

I reckon that is nowhere near enterpricey enough. I would be very surprised to find anything less than the biggest Oracle db running that crap.

Re: T-mobile password reset does not allow you to type the letter "V"

#70

I hate when people disable pasting in password fields. Some of my passwords are 50 character random strings stored in 1password and sometimes I need to copy/paste and can not do it (ahem, icloud). I usually end up disabling javascript if the page still renders without javascript.

Assuming you're on Linux, you can just pipe the input into "xargs xdotool type". Thanks to the keyboard abstraction in X, no program will ever be able to tell that you didn't just type that on a keyboard.

Or just click the password field -> Menu [Edit] -> [Paste]
Post reply on HN