News for hackers. Stuff that matters.

A comment on Gmail password first character is case insensitive on mobile device. Parent comment

Re:Gmail password first character is case insensitive on mob... by teawrecks on Saturday October 09, 2021 @12:53PM (#28811384)
You're now doing up to 3x the work for every login. When servicing millions of requests a second, that cost adds up.
[ Parent | on HN ]
Re:Gmail password first character is case insensitive on mob... by jsnell on Saturday October 09, 2021 @01:32PM (#28811673)
Passwords are only verified on login. Does it seems reasonable that there are millions of logins to Gmail from mobile devices every second?

Back of the envelope: 2 million logins per second would mean about 170 billion logins per day. With 7 billion people on the planet, that'd mean about 25 logins per day from each man, woman and child.

[ Parent | on HN ]
Re:Gmail password first character is case insensitive on mob... by danachow on Saturday October 09, 2021 @03:25PM (#28812499)
“Up to 3x the work” is very misleading, since the average will be much less than 3.
[ Parent | on HN ]
Re:Gmail password first character is case insensitive on mob... by lordgrenville on Saturday October 09, 2021 @01:21PM (#28811596)
I would imagine it's sequential: check exact match hash, if it fails check uppercase-initial-hash, etc.
[ Parent | on HN ]