News for hackers. Stuff that matters.

A comment on Tips for Better Signup / Login UX. Parent comment

Re:Tips for Better Signup / Login UX by sib on Monday June 28, 2021 @11:54AM (#27663493)
>> "PaSSWord123" "pAsswORD123"

Wow - non-case-sensitive passwords seem like a bad idea...

[ Parent | on HN ]
Re:Tips for Better Signup / Login UX by CJefferson on Monday June 28, 2021 @12:29PM (#27663966)
Not it's still case sensitive, you can just flip all the character's case. You are only losing "one bit" of password information.
[ Parent | on HN ]
Re:Tips for Better Signup / Login UX by cratermoon on Monday June 28, 2021 @03:35PM (#27666738)
> it's still case sensitive, you can just flip all the character's case.

How is "flipping all the character's case" different from case-insensitive?

[ Parent | on HN ]
Re:Tips for Better Signup / Login UX by CJefferson on Monday June 28, 2021 @06:21PM (#27669016)
They flip all character's case in one go, and also capitalise just the first character.

So, if your password was:

fishCAT

They would accept fishCAT, and also FISHcat and FishCAT, and that's it.

[ Parent | on HN ]
Re:Tips for Better Signup / Login UX by anoncake on Monday June 28, 2021 @12:10PM (#27663713)
Pretty sure they don't do that for authentication.
[ Parent | on HN ]
Re:Tips for Better Signup / Login UX by CJefferson on Monday June 28, 2021 @12:30PM (#27663989)
They do, you can see a discussion here: https://security.stackexchange.com/questions/68013/facebook-...
[ Parent | on HN ]
Re:Tips for Better Signup / Login UX by anoncake on Tuesday June 29, 2021 @10:10AM (#27675974)
I didn't know it's still possible for Facebook to disappoint me.
[ Parent | on HN ]