News for hackers. Stuff that matters.

A comment on Two-factor paper passwords. Parent comment

Re:Two-factor paper passwords by jacobr1 on Tuesday May 03, 2016 @10:15AM (#11620843)
Often that is the size of the DB column and the password is stored in plaintext (or was and the size restriction remained).
[ Parent | on HN ]
Re:Two-factor paper passwords by jsingleton on Tuesday May 03, 2016 @12:04PM (#11621827)
This is usually the case but there are frequently short length restrictions even when it's hashed. Sometimes only on the client side too, so you can just remove the attribute from the input.
[ Parent | on HN ]
Re:Two-factor paper passwords by pavel_lishin on Tuesday May 03, 2016 @12:15PM (#11621944)
As I understand it, those restrictions are typically due to having an interface with some legacy system where those restrictions can't be removed.
[ Parent | on HN ]