Two Canadian banks say accounts compromised: CIBC 40,000 and BMO 50,000

Re:Two Canadian banks say accounts compromised: CIBC 40,000 ... by pietroglyph on Monday May 28, 2018 @10:01PM (#17175926)

I understand that, but I'm looking for something more specific... Hashes aren't length-limited by design; I suppose storage size or database limitations could be an issue, but a 6-character password in ASCII with 1 million users is 6 megabytes.

[ Parent | on HN ]

Re:Two Canadian banks say accounts compromised: CIBC 40,000 ... by mitchty on Monday May 28, 2018 @10:23PM (#17176016)

Hashes aren't limited, but the os might be limited in its implementation.

ref: https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.1.0/...

And I quote:

If you are RACF-defined, you must enter the password defined in the RACF® data set as the value for password. The new password specifies the password that is to replace the current password. new_password must be separated from password by a slash(/) and, optionally, one or more standard delimiters (tab, blank, or comma). new_password is 1 to 8 alphanumeric characters long. This operand is ignored for non-RACF defined users. (Printing is suppressed for some types of terminals when you respond to a prompt for a password.) With z/OS® V1R7 or later, the password and new_password can be in mixed case, if your installation has enabled RACF mixed case password support.

[ Parent | on HN ]

Re:Two Canadian banks say accounts compromised: CIBC 40,000 ... by shakna on Monday May 28, 2018 @10:33PM (#17176049)

Some of these systems originate from the era when a 5mb hard drive was an incredible amount of space, even at enterprise level. They pre-date personal computing.

[ Parent | on HN ]