Post a boarding pass on Facebook, get your account stolen

Re:Post a boarding pass on Facebook, get your account stolen by diggan on Saturday September 23, 2017 @10:38AM (#15319924)

Not that they can really know, but most I've seen is that they disable pasting anything into the website, effectively making banking super slow for us with password managers and long passwords.

Fortunately, my bank doesn't disable pasting (Banc Sabadell in Spain). Instead the password is restricted to maximum 6 numbers for login. Yay banks!

[ Parent | on HN ]

Re:Post a boarding pass on Facebook, get your account stolen by pwg on Saturday September 23, 2017 @01:04PM (#15320628)

In Firefox, at least, there is an about:config option to turn off the ability of webpages to disable paste. Flip that setting and managers work again on those pages.

[ Parent | on HN ]

Re:Post a boarding pass on Facebook, get your account stolen by mighty_atomic_c on Saturday September 23, 2017 @11:02AM (#15320038)

6 characters? Let me guess, were there restrictions on character space and case?

One place I had an account has a password input that restricts all of those, so it's like an 8-10 character string of all capital letters. I don't understand it at all.

[ Parent | on HN ]

Re:Post a boarding pass on Facebook, get your account stolen by pwg on Saturday September 23, 2017 @01:08PM (#15320646)

This is often an externally visible code smell that implies plaintext storage of passwords in a char(10) (or whatever the max length is) db column.

[ Parent | on HN ]

Re:Post a boarding pass on Facebook, get your account stolen by diggan on Saturday September 23, 2017 @07:24PM (#15322331)

You read wrong, not 6 characters but 6 numbers. So no spaces or casing.

[ Parent | on HN ]

Re:Post a boarding pass on Facebook, get your account stolen by cortesoft on Saturday September 23, 2017 @11:30AM (#15320160)

Yeah, I just disable their disablement. Super annoying.

[ Parent | on HN ]