News for hackers. Stuff that matters.

A comment on Disclosure: Unlimited Chase Ultimate Rewards Points. Parent comment

Re:Disclosure: Unlimited Chase Ultimate Rewards Points by bonestamp2 on Wednesday November 04, 2020 @10:42AM (#24990005)
I suspect they know they have a lot of vulnerabilities and they don't want to encourage people to poke around. I mean, their passwords aren't even case sensitive. This is also probably why they fired you as a customer, to discourage anyone else from even trying.
[ Parent | on HN ]
Re:Disclosure: Unlimited Chase Ultimate Rewards Points by recursive on Wednesday November 04, 2020 @12:30PM (#24991095)
Case-sensitive password gets you <1 bit of entropy per password character. That doesn't sound like that big of a deal.
[ Parent | on HN ]
Re:Disclosure: Unlimited Chase Ultimate Rewards Points by tpxl on Wednesday November 04, 2020 @12:45PM (#24991253)
So a password with 10 characters is 1000 times less secure if you don't use case sensitivity. That's a big deal in my eyes.
[ Parent | on HN ]
Re:Disclosure: Unlimited Chase Ultimate Rewards Points by recursive on Wednesday November 04, 2020 @01:02PM (#24991392)
" times less secure" isn't really well defined. Entropy is usually measured in log-space.

And in practice, it's less than one bit, since not all characters are letters.

[ Parent | on HN ]