News for hackers. Stuff that matters.

A comment on Sites with dumb password rules. Parent comment

Re:Sites with dumb password rules by learnstats2 on Thursday September 05, 2019 @05:57PM (#20891010)
I haven't checked lately, but I understood that Facebook passwords are case-insensitive.
[ Parent | on HN ]
Re:Sites with dumb password rules by RandallBrown on Thursday September 05, 2019 @08:56PM (#20892069)
They're not case insensitive, but they do allow for some casing mistakes.

Flipped case (caps lock) or first character case is wrong (mobile input field) were both allowed. Not sure about now. The article I found about it was from 2014.

[ Parent | on HN ]
Re:Sites with dumb password rules by ineedasername on Thursday September 05, 2019 @09:54PM (#20892348)
That seems bad, like philosophically it feels like a password and only that exact password should work. But rationally I can't see too much of a problem with this.
[ Parent | on HN ]
Re:Sites with dumb password rules by davchana on Friday September 06, 2019 @01:44AM (#20893367)
No, not case-insensitive. They are case-sensitive. Atleast in 2012 Facebook accepted PassWord1 & pASSwORD1 (Case Reversed) passwords.

Stackoverflow Meta Question here:

https://webapps.stackexchange.com/questions/26301/facebook-a...

My Question (the reason why I know):

https://stackoverflow.com/questions/10718236/how-to-alter-th...

[ Parent | on HN ]
Re:Sites with dumb password rules by jdashg on Thursday September 05, 2019 @06:36PM (#20891276)
IIRC Wells Fargo passwords used to be /partially/ insensitive. Like, just the first half was to_lower.
[ Parent | on HN ]