Re:Zoom fixes major Mac webcam security flaw with emergency ...
by rhinoceraptor on Wednesday July 10, 2019 @06:29AM
(#20400661)
> You're just going to hash it anyway
Wow, you're optimistic :)
Re:Zoom fixes major Mac webcam security flaw with emergency ...
by z3t4 on Wednesday July 10, 2019 @04:43AM
(#20400228)
I remember when I started out with SQL databases, someone managed to hack the site using SQL injects. So I made a SQL sanitation function, but soon enough someone complained that they couln't have escape characters in their password. =)
Now a days I always use a library that parameterize all SQL variables to avoid SQL injections.
Re:Zoom fixes major Mac webcam security flaw with emergency ...
by iguy on Wednesday July 10, 2019 @04:38AM
(#20400192)
Does it matter? I mean is there another way of entering this string which preserves the spaces, or is deleting them just part of the hash function?
Re:Zoom fixes major Mac webcam security flaw with emergency ...
by rossng on Wednesday July 10, 2019 @04:42AM
(#20400221)
Yes, you can paste a string with internal spaces. I guess you can also disable JS and type whatever you want. Passwords with spaces work absolutely fine, too - it's just the signup form that is broken.
Re:Zoom fixes major Mac webcam security flaw with emergency ...
by Faark on Wednesday July 10, 2019 @09:00AM
(#20401513)
They probably had to many people accidentally copy-pasting strings with spaces into the form. Like the good old "double click to select a word" also picking up the space after the word.
The reason I can empathize with your complain is it being highly unlikely they are able to keep those restrictions consistent across all password forms & login methods.
I found it particularly egregious that Zoom's form auto-trims any spaces from the end of the string - so they are deleted as you type with no feedback (unless you happen to be watching the dots flicker).