|
On a site I needed to register an account, they had a restriction for password to be at least 8 characters. Full stop.
I entered a password of 14 characters and got an error message: password too short.
After a uselessly long effort to get past the %#$%#&%#&# smart menu on the phone where none of the options addressed my issue, I eventually got to a(n alleged) human.
I had entered a password with upper, lower, numeric, and special characters.
Turns out only characters that appear on a phone are allowed.
It would seem the der who wrote the (regex?) validation only returned one error response to me - password too short
But I never wave bye bye
|
|
|
|
|
Well someone had to say it. Passwords, no matter how complex, are easily hack-able.
This is what BitCoin depends on, they call them "Miners".
The only difference, is that Transactions in Bit Coin, are much more complex, and harder to
crack than any password you can come up with, or (Generate).
2-factor (Cell phone) - is being touted as a cure, but once they get in, they have your phone
number, and can easily change profile setting to be their (burner) phone.
The fuss about the lengths, characters, and all that.... is also frustrating.
You could depend on the hacker to take the easier way out, and not spend the time to crack
a good password... but then again, it may incent them to spend the "crack time" , because
of the implication of it being a special case, which might reward the extra time.
Yes, I said "Crack time".
Keep It Simple, keep it moving.
|
|
|
|
|
|
To me it seems obvious that the message should be "To improve the security, you are invited to create a new password respecting rules described at this page (link). Please do that before February 25th, problems can appear afterwards."
And of course, for obvious security reasons, you can access the site with your previous password.
|
|
|
|
|
Here's an interesting take. They should have allowed you to enter whatever you think your password was.
They only had to address it when RESETTING it.
And quite frankly, they should be hashing your password to death, with enough salt to raise the blood pressure of a cadaver!
hash = GoodHashOf( PASSWORD, username, date account created, date password was set, password, USERID);
Where every comma is really + "SALT" + and each repetition is different salt. And should be userID dependent.
FINALLY, their site should have only mentioned the extra characters are no longer allowed on a password failed page!
I really hate when people don't allow ";" (I understand the SQL Injection filters. But if you are not using bind variables, you should be beaten and shot and beaten again... LOL
|
|
|
|
|
I restrict nothing, nor require digits or special chars, but most of all I don't limit length, and encourage my users to use a long, easy to remember pass-phrase.
"'Do what thou wilt...' is to bid Stars to shine, Vines to bear grapes, Water to seek its level; man is the only being in Nature that has striven to set himself at odds with himself."
—Aleister Crowley
|
|
|
|
|
"Due to a mix up alarm made my breakfast sweeter" (9)
|
|
|
|
|
MARMELADE!
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
you won't leave me any chance to win 
In Word you can only store 2 bytes. That is why I use Writer.
|
|
|
|
|
Oh c**k.
I read it, thought "Marmalade" and posted instinctively.
I could be wrong, though?
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
I just looked, and in fact I am wrong - over to you, if you are quick!
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
|
Nah, I don't do drugs ...
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
...anymore?
"It is easy to decipher extraterrestrial signals after deciphering Javascript and VB6 themselves.", ISanti[ ^]
|
|
|
|
|
Indeedy! 
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
Well - somebody cannot spell so you are in with a chance...
|
|
|
|
|
MARMALADE ?
In Word you can only store 2 bytes. That is why I use Writer.
|
|
|
|
|
Yes please, I am quite peckish and it would make a nice brunch.
|
|
|
|
|
Yay! 
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
|
The way GRIFF wrote it is the way we Dutch write it. So I thought it was done....
Tomorrow 'kun je de borst nat maken' (Dutch saying: You have to make your chest wet -> hard times ahead) you have to find out artist and songtitle!
In Word you can only store 2 bytes. That is why I use Writer.
|
|
|
|
|
@DuncanEdwardsJones
Where's the CCC?
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
Too much excitement... it's on its way...
|
|
|
|
|
First time I've used it "in anger".
I got an email with an attached PDF about an Amazon order and no detail of what I ordered.
I'm a suspicious chap, so save the attachment, open the Sandbox, copy'n'paste the file, open it - and it's about an order I made alright. But from FleaBay ... Hmmm.
Could be a mistake, I guess ... but it's going to Quarantine anyway.
Sandbox works. Much smaller footprint than a full VM, and doesn't require an extra OS licence. Nice.
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
OriginalGriff wrote: and doesn't require an extra OS licence
Would you really worry about that, in this sort of context?
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
