22

“Password length mustn't exceed seventeen characters.”
Why? Why do some Web sites still have this rule? It's 2018. We should be using passwords of at least twenty-four characters. This is crap.

Comments
  • 4
    It’s probably that their SQL scheme doesn’t let them do that?
  • 1
    @Jameslikestea Most likely, yes, but changing that to accommodate lengthier passwords clearly isn't too difficult.
  • 4
    @Jameslikestea which means they've made their own password hashing algorithm which means they most likely have a few security issues
  • 8
    Please my online banking only allows 6 Characters and prohibits you from using ^¥[| and shit like that. But they wanted to school me on cyber security. Fucking Sparkasse
  • 1
  • 1
  • 5
    @CaptainJuers it fascinates me that some banks have terrible solutions for login.

    In Norway banks use something called BankID, a national login system. It’s a multi factor security.

    I login to the bank, choose BankID on mobile. I enter my birthday and phone number. The bank generates two words for me to verify.
    I open my phone, I get a popup with the two same words as the bank has. I click accept, and have to enter my personal pin. It thinks for a while, and voila, I’m logged in.

    This works on all governmental sites, banks, insurance companies, some shops if I buy something on credit, and some online payment APIs.

    More info
    https://www.bankid.no/en/company/
  • 1
    @-ANGRY-CLIENT- Rip
  • 0
    @ChainsawBaby Thats pretty sophisticated. Can you vote through the governement sites? Or is it just for further information on legislatory buisness?
  • 0
    @CaptainJuers nope, no online voting, yet.
  • 1
    Man I've come across sites that don't allow special characters
  • 5
    Ah, yet another website that stores its passwords in plain 🙃
  • 2
    Even worse are JS wrappers for login forms that prohibit pasting passwords.
  • 0
    For reference, an example of a pretty good password is as follows: “lX3eV2mC1onSquee'zZZ'yir#D3lici007u::;$” .

    Please don't actually use this.
  • 1
    @bigus-dickus ahh yes, but they may not know that! Some “engineers” don’t know their ass from their elbow
Add Comment