Re:The “Chad” bug
by tempestn on Thursday December 31, 2015 @03:33AM
(#10816821)
I see the reasoning behind trimming trailing spaces, but it could cause at least as many problems as it solves. Plenty of people use automatically generated passwords, and while hopefully most auto-generators don't include spaces, I expect some might. Better might be to warn the user if their password has a trailing space.
[ Parent
| on HN ]
Could you not trim spaces upon attempted login as well to make this a non-issue?
I do like the idea of warning the user upon creation.
Good idea; I agree that that's better.
Re:The “Chad” bug
by nothrabannosir on Thursday December 31, 2015 @05:51AM
(#10817118)
Is there any password generator in this reality which does that? Serious question. More than zero?
Probably not a serious one, but a lot of people write their own little scripts and utilities to do this. So definitely more than zero. Perhaps not a significant number, but I'd still be concerned about changing a user's entered password without letting them know. relearn's solution is a good one though.
I would guess the number of people who accidently enter "password " is far greater than the number of people who have "p " as their password. Plus, for the people who do deliberately input spaces they will just have a weaker password, not issues logging in.