Re:Researchers discovered the perfect password that’s easy t...
by morganvachon on Friday October 23, 2015 @11:57AM
(#10439412)
My biggest pet peeve with password requirements is limiting the scope of special characters to some arbitrary subset, i.e. "you may only use the characters @#$%^& in your password", or not allowing spaces. Without spaces I can't use a phrase without running it all together, and my instinct is to type the spaces, so I end up getting frustrated and using some less secure password instead.
[ Parent
| on HN ]
Re:Researchers discovered the perfect password that’s easy t...
by chrisfarms on Friday October 23, 2015 @12:04PM
(#10439462)
Whenever I see those sorts of limitation I assume there's probably some kind of poorly handled escape situation to exploit and their fix was "well just don't allow that pesky < character"
Re:Researchers discovered the perfect password that’s easy t...
by JoshTriplett on Friday October 23, 2015 @12:49PM
(#10439756)
> Whenever I see those sorts of limitation I assume there's probably some kind of poorly handled escape situation to exploit
Which, in turn, implies that some system handles the password as plaintext rather than via a password-appropriate digest.