this post was submitted on 18 Aug 2024
847 points (98.8% liked)

Cybersecurity - Memes

1975 readers
1 users here now

Only the hottest memes in Cybersecurity

founded 1 year ago
MODERATORS
Sam1232188@lemmy.world
neurohost@lemmy.world
Alphadef@programming.dev
CannaVet@lemmy.world
847
Password length requirement (feddit.org)
submitted 3 months ago* (last edited 3 months ago) by cron@feddit.org to c/cybersecuritymemes@lemmy.world
171 comments fedilink hide all child comments
 

Last week, I tried to register for a service and was really surprised by a password limit of 16 characters. Why on earth yould you impose such strict limits? Never heard of correct horse battery staple?

you are viewing a single comment's thread
view the rest of the comments
[–] tiredofsametab@fedia.io 6 points 3 months ago (2 children)

hashed, which means they take up a fixed size

One would hope so anyway,

you should have form upload size limits

The above conflicts directly with OP's Accept any utf8 string

[–] milicent_bystandr@lemm.ee 5 points 3 months ago (1 children)

I opened an account in 2014 and I'm still uploading my password.

[–] tiredofsametab@fedia.io 3 points 3 months ago (1 children)

If you aren't required to use an upload manager, are you really setting a solid password :thinking:

[–] milicent_bystandr@lemm.ee 4 points 3 months ago

Can't trust an upload manager not to be hacked. I employ a team of typists in India.

[–] x0x7@lemmy.world 3 points 3 months ago* (last edited 3 months ago)

Ok. Take up to 65,536 bytes of utf8 string. Or better yet. Accept any password length. I mean any. But instead of transmitting it you bcyrpt on their machine and then use the resulting key to hmac sign a recent timestamp that can't be reused.