News for hackers. Stuff that matters.

A comment on Dumb Password Rules. Parent comment

Re:Dumb Password Rules by adrr on Monday December 05, 2016 @11:20AM (#13106461)
Amex website had their max password length of 8 characters. Not sure if they changed it. Even if you do have a system constraint, you could just lop off the extra characters and the user wouldn't probably never notice.
[ Parent | on HN ]
Re:Dumb Password Rules by jlgaddis on Monday December 05, 2016 @11:59AM (#13106865)
Mine is way more than eight characters (randomly generated w/ KeePassX), although I haven't tried truncating it to eight and seeing what happens.
[ Parent | on HN ]
Re:Dumb Password Rules by duffn on Monday December 05, 2016 @11:15PM (#13112213)
According to the screen shot in the repo, it's not even case sensitive either.
[ Parent | on HN ]