News for hackers. Stuff that matters.
Re:The Bare Minimum You Should Do to Protect Your Family's Data by pbhjpbhj on Sunday December 02, 2018 @07:04AM (#18581984)
I was on a site the other day, which I won't share publicly, that required "NO MORE than 6 characters, including precisely 1 number and 1 capital" (paraphrase, my emphasis) ... I definitely WTF-ed at that.

My default is 20 characters of alphanum, or 16 of "graph" (though I drop look alike characters; 32 chars if I'm entering payment details).

One has to hope they have a small limit on retries. They definitely carry commercially sensitive data and do payment processing.

What worries me is they used js to catch my attempt to use 20 chars, so they're not operating completely naively -- all I can think was it was a misinterpretation and s/most/least.

There are no comments on this comment yet.