News for hackers. Stuff that matters.

A comment on LinkedIn just sent me this.

Re:LinkedIn just sent me this by twotavol on Thursday May 19, 2016 @08:03AM (#11729508)
Account breaches are so god damn annoying. That coupled with the stupid rules for coming up with passwords (only 6-8 characters, a-z,A-Z,0-9 allowed!) makes it really frustrating to keep track of and manage passwords for sites like this.

Hurry up and solve the user identification problem, HN.

[ Parent | on HN ]
Re:LinkedIn just sent me this by ChrisGranger on Thursday May 19, 2016 @12:28PM (#11731385)
It's astounding to me that some sites still limit passwords to such a small number of characters. "Security? We're not even trying."
[ Parent | on HN ]
Re:LinkedIn just sent me this by koolba on Thursday May 19, 2016 @12:52PM (#11731567)
Even stupider are sites that require exactly N characters. Also, they usually pick small N for that as well.
[ Parent | on HN ]
Re:LinkedIn just sent me this by speedyapoc on Thursday May 19, 2016 @04:16PM (#11733420)
I know a local bank that limits password lengths to exactly 7, and the contents of the passwords to ONLY DIGITS. I can't imagine how many users are going to just use their phone number.
[ Parent | on HN ]
Re:LinkedIn just sent me this by emilburzo on Thursday May 19, 2016 @08:34AM (#11729618)
^ exactly the reasons I went ahead and started using KeePassX.

It's a bit terrifying at first to not know any of your passwords, but you get used to it.

[ Parent | on HN ]
Re:LinkedIn just sent me this by mod on Thursday May 19, 2016 @03:00PM (#11732763)
It doesn't bother me, given the ubiquity of email resets.

I do still have a bunch of really old ones (pre-password-manager) memorized, though.

[ Parent | on HN ]