this post was submitted on 18 Aug 2024
847 points (98.8% liked)

Cybersecurity - Memes

1964 readers
1 users here now

Only the hottest memes in Cybersecurity

founded 1 year ago
MODERATORS
 

Last week, I tried to register for a service and was really surprised by a password limit of 16 characters. Why on earth yould you impose such strict limits? Never heard of correct horse battery staple?

you are viewing a single comment's thread
view the rest of the comments
[–] dwemthy@lemdro.id 16 points 2 months ago (1 children)

A major US bank that I used to use has case insensitive passwords, found that out one day when I noticed caps lock was on after logging in with no trouble

[–] viking@infosec.pub 12 points 2 months ago (2 children)

Makes you wonder if they store the password in plain text, or convert to lower key during your first input so it's at least hashed. I wouldn't be surprised if it's not.

[–] lseif@sopuli.xyz 10 points 2 months ago (1 children)

they store the passwords as filenames on a windows system

[–] subignition@fedia.io 4 points 2 months ago (1 children)

Put a colon in your password and crash the whole system

[–] lseif@sopuli.xyz 2 points 2 months ago

set your password as GodMode.{ED7BA470-8E54-465E-825C-99712043E01C} for infinite money glitch

[–] JustAnotherRando@lemmy.world 4 points 2 months ago* (last edited 2 months ago)

I don't think it could be hashed if it is case insensitive. It's fairly early so I may be misremembering but I'm not aware of any hashing algo that ignores case.

Edit: Ah, actually they could be storing the password as a hash, but they would probably have to do like a password. ToLower() call or something where they morphed the string before checking... The thought of which just makes me shudder.