News for hackers. Stuff that matters.

A comment on The Effectiveness of Publicly Shaming Bad Security. Parent comment

Re:The Effectiveness of Publicly Shaming Bad Security by chatmasta on Tuesday September 11, 2018 @01:54PM (#17961867)
NatWest goes a step further and asks you to enter (for example) “the 1st, 5th, 8th and 9th character of your password.”

I saw a comment once explaining why this might make sense to prevent replay attacks. But it seems awfully absurd.

[ Parent | on HN ]
Re:The Effectiveness of Publicly Shaming Bad Security by jedberg on Tuesday September 11, 2018 @02:41PM (#17962219)
Not to mention it means they are storing the password in plaintext.
[ Parent | on HN ]