no

basically the hashing algorithm they use strips out certain information, which means that e.g.

"PaSSWord123" "pAsswORD123" "PaSSWord123 " etc

all hash to the same value, and so are equivalent.

>> "PaSSWord123" "pAsswORD123"

Wow - non-case-sensitive passwords seem like a bad idea...

Not it's still case sensitive, you can just flip all the character's case. You are only losing "one bit" of password information.

> it's still case sensitive, you can just flip all the character's case.

How is "flipping all the character's case" different from case-insensitive?

They flip all character's case in one go, and also capitalise just the first character.

So, if your password was:

fishCAT

They would accept fishCAT, and also FISHcat and FishCAT, and that's it.

Pretty sure they don't do that for authentication.

They do, you can see a discussion here: https://security.stackexchange.com/questions/68013/facebook-...

I didn't know it's still possible for Facebook to disappoint me.