News for hackers. Stuff that matters.

A comment on The Great Cannon has been deployed again. Parent comment

Re:The Great Cannon has been deployed again by mgerdts on Friday December 06, 2019 @05:10PM (#21726500)
Are you sure your password has a $ in it? What makes you think that they don't strip the $ when you set and enter your password?

If it seemed like they were doing a hash then compare, I would wonder if they are using the legacy unix crypt that truncates passwords at 8 characters.

[ Parent | on HN ]
Re:The Great Cannon has been deployed again by unethical_ban on Saturday December 07, 2019 @11:13AM (#21730978)
I know when I registered and typed twice that my password had "$" in it. And they mailed me back my password without it. Finally, it wasn't just a truncate because there were characters after the position where "$" should be.

And if they did strip it out, that is bad. That's the point.

[ Parent | on HN ]