News for hackers. Stuff that matters.
Re:Sites with dumb password rules by iamnotacrook on Friday September 06, 2019 @06:07AM (#20894384)
I literally couldn't apply for an American Express card about 15 years ago because my (ISP) email address was too long. I wonder why they chose to restrict it rather than go with the standard email max length; they had to put effort in to pointlessly restrict new signups. Odd.
Re:Sites with dumb password rules by myself248 on Friday September 06, 2019 @08:03AM (#20894855)
Back in '99 or so, there was a company called Halibut Stuff selling T-shirts at Defcon (and presumably other events) that included a free email redirect service with purchase of a shirt.

So I got a shirt that said "[email protected]"

Not too much later, I ended up working in software validation, and I broke so many login forms with that perfectly-valid address, I lost count.

Since then, Halibut Stuff dissolved and the forwarding service is long gone. If some HN reader wanted to set up a Mailinator-like service that generates absurd-yet-RFC-compliant email addresses for such testing, I think there might be a market.

Re:Sites with dumb password rules by boring_twenties on Tuesday September 17, 2019 @08:51PM (#21001523)
Like anyone would actually use such a testing service.

Until a few years ago it was fairly commonplace for sites to reject my perfectly valid addresses just because they had more than one period (i.e., a subdomain) or in one case, ended in the .us TLD.

Re:Sites with dumb password rules by OGWhales on Saturday September 07, 2019 @03:07AM (#20902267)
Likely because of integration with legacy tech.