Re:Stop forcing arbitrary password rules
by Someone on Saturday October 24, 2015 @08:23AM
(#10443381)
Happened to me this week. "Luckily", they also implemented the "feature" where they can send you your password by email directly after you set it, so when I couldn't get in with the password I set, I reset the password, got a mail with a new password, logged in, changed the password to a new random long string, and this timeasked them to send the password to me. The password they sent was chopped off. That told me their limit, so I could set my password a third time to get something maximally secure.
Re:Stop forcing arbitrary password rules
by smoothgrips on Saturday October 24, 2015 @11:32AM
(#10443871)
So, they emailed your password to you? Plaintext? They store passwords in plaintext? Paypal?
Re:Stop forcing arbitrary password rules
by Someone on Saturday October 24, 2015 @09:18PM
(#10445554)
directly after you set it
Re:Stop forcing arbitrary password rules
by IanCal on Saturday October 24, 2015 @07:37AM
(#10443272)
> Sounds so insane I guess it must have really happened.
That happened to me on either "verified by visa" or the mastercard equivalent. I had to reset my password a few times before I figured that one out. For those that haven't used this it's an extra password protected step that comes up sometimes when purchasing things with your card.
Re:Stop forcing arbitrary password rules
by citruspi on Saturday October 24, 2015 @08:59AM
(#10443456)
> Sounds so insane I guess it must have really happened.
I had it happen to me when changing a password on an Apple ID account 1-2 years ago. My password was accepted without an error and truncated to 32 characters.
I had similar issue with paypal once. Their bank account number field expected to get N digits without spaces, so it was hard limited to N characters. Of course they didn't bother telling about that. When I pasted my number with some K space separators tossed between digits, the last K digits have been silently truncated. Boom, account locked.