Re:Don’t try to sanitize input – escape output
by fwsgonzo on Thursday February 27, 2020 @08:03AM
(#22432831)
Yep. I've stopped counting the amount of websites that force me to use weak passwords. It's crazy that this is still a thing in 2020.
I wish the controls on browsers came with a green V that implements best practices (8+ symbols, no filter) so that people who made websites understand that this is what they should conform to. Not their own misconceptions about password security.
Re:Don’t try to sanitize input – escape output
by lodovic on Friday February 28, 2020 @06:45AM
(#22442123)
I wish websites would stop enforcing a "password policy". An insecure password should be a choice. If you are so sure you cannot secure your site, leave authentication to a third party provider. All this leads to is zillions of user accounts that are used only once.
Re:Don’t try to sanitize input – escape output
by hinkley on Friday February 28, 2020 @11:23PM
(#22448802)
I’m sorry, your password must be 16 characters or less and contain no white space or punctuation.
Re:Don’t try to sanitize input – escape output
by chaz6 on Friday February 28, 2020 @11:29AM
(#22443917)
I have heard stories about people in Ireland struggling to get certain services because their name contains a Fada, but some of the identity paperwork they have is missing the Fada due to lack of support by computer systems.
It's crazy.
Even if you're using 1990s technology without parameterised queries, it's not like it's impossible to say `insert into users (name, motto) values ('O\'Brien', 'foo\' OR 1=1;')`.