News for hackers. Stuff that matters.

A comment on Stop forcing arbitrary password rules. Parent comment

Re:Stop forcing arbitrary password rules by Estragon on Saturday October 24, 2015 @04:26PM (#10444733)
> As long as you throttle login attempts short passwords are fine.

Not if the password-hash database leaks.

[ Parent | on HN ]
Re:Stop forcing arbitrary password rules by Houshalter on Saturday October 24, 2015 @08:32PM (#10445431)
If someone has hacked into your bank, you have bigger problems than the hackers knowing your password.
[ Parent | on HN ]