News for hackers. Stuff that matters.

A comment on Telegram Login for Websites. Parent comment

Re:Telegram Login for Websites by tomsmeding on Wednesday February 07, 2018 @11:53AM (#16325837)
They do? On which login do they show that information? I've only seen the kind-of two-factor one where you have to enter a code sent in a text message or with a telegram message to a different device.
[ Parent | on HN ]
Re:Telegram Login for Websites by gant on Wednesday February 07, 2018 @12:08PM (#16325988)
Took a while for me to reinstall it, this is what it looks like (just after SMS auth):

https://i.imgur.com/BAnddlg.png

I counted the asterisks, they do in fact reveal the length of the password.

[ Parent | on HN ]
Re:Telegram Login for Websites by epiceric on Wednesday February 07, 2018 @01:06PM (#16326574)
Isn't that a user-defined hint? Mine shows text that I manually entered the last time I changed my password.
[ Parent | on HN ]
Re:Telegram Login for Websites by kozlovsky on Wednesday February 07, 2018 @01:12PM (#16326629)
Hint is a text field that you fill in when creating a new cloud password. The hint text is generated based on password if you did not fill it yourself.
[ Parent | on HN ]
Re:Telegram Login for Websites by X-Istence on Wednesday February 07, 2018 @02:04PM (#16327077)
> The hint text is generated based on password if you did not fill it yourself.

That... is a problem.

[ Parent | on HN ]