Tell HN: Zoom truncates passwords to 32 chars

Re:Tell HN: Zoom truncates passwords to 32 chars by DangerousPie on Wednesday April 01, 2020 @12:03PM (#22750143)

I am really struggling to come up with a situation where this would actually matter. I guess if for some reason the first 32 characters of my password got leaked but not the next 32? But why would that ever happen, and who wouldn't change their password in that situation anyway?

[ Parent | on HN ]

Re:Tell HN: Zoom truncates passwords to 32 chars by Dylan16807 on Wednesday April 01, 2020 @12:30PM (#22750527)

32 characters might be safe, but we could make the same argument for 16 characters, yet there is a huge vulnerability there: Someone might have a perfectly secure series of words as a password, but only the first three words survive truncation. Now they can be brute-forced easily.

It's bad form in general to truncate a password.

[ Parent | on HN ]