News for hackers. Stuff that matters.

A comment on Ebay posts every character a user types into the password box. Parent comment

Re:Ebay posts every character a user types into the password... by kstrauser on Wednesday June 29, 2016 @02:38PM (#12003647)
QA just assures that the deliverable meets the spec. It's perfectly possible to write an excellent implementation of a terrible idea.
[ Parent | on HN ]
Re:Ebay posts every character a user types into the password... by brokenmachine on Thursday June 30, 2016 @02:34AM (#12006952)
or a terrible implementation of a good idea.

Manager: "We need password strength validation." Tech: writes code to send each character of password to server as cleartext Tech: "Done"

[ Parent | on HN ]