News for hackers. Stuff that matters.
Re:I hate password rules by reaperducer on Tuesday November 16, 2021 @11:59AM (#29242972)
The worst sites are the ones that truncate my generated password to fit their maximum password length and then don't tell me

Or worse, they truncate your password after you've already used it for years and years.

I had a 30-character password with Bank of America. Somewhere along the line, it changed its password requirements to only allow a maximum of 20 or 25 characters (I forget), which automatically invalidated my password.

The password was stored in my password manager, so I knew I wasn't entering it wrong.

BoA support said I should use the "change password" feature to update my password, but I couldn't because it requires me to enter the old password, which it would not accept. For some reason I can't remember, I couldn't use the "forgot password" feature. Maybe it also didn't work right.

I spent an entire day on the phone getting bounced from person to person before finally someone was able to take a new password over the phone.

Since Bank of America can't figure out how to build a web site login, I no longer trust it with my money. I emptied that savings account and paid off the credit card as quickly as I could. I no longer use BoA.

Re:I hate password rules by nzach on Tuesday November 16, 2021 @12:27PM (#29243408)
>Or worse, they truncate your password after you've already used it for years and years.

Worse than that must be the sudden realization that your bank probably saves your password in plain text somewhere.

Re:I hate password rules by iso1631 on Tuesday November 16, 2021 @03:12PM (#29245810)
As it's a bank that's probably the case, but you could have a change on the server side from

  hash($password) == $storedhash
to

  hash(substr($password,0,20)) == $storedhash
And you wouldn't get in, with any password (including just putting in the first 20 characters)
Re:I hate password rules by bananasbandanas on Tuesday November 16, 2021 @04:49PM (#29246765)
More likely they just updated the password during a successful login.
Re:I hate password rules by fossuser on Tuesday November 16, 2021 @12:34PM (#29243522)
I'm not sure why anyone uses banks like BoA, Wells Fargo, First Niagara, etc.

Fidelity is a superior experience in nearly every way - just categorically. I'm not sure if people just don't know that you can use Fidelity this way?

The only downsides are no local branches, but that's hardly an issue unless you need a cashiers check. In those rare cases you can spin up an account at shitty bank, get the check, then close the account. I've had to do that maybe once ever.

Re:I hate password rules by ysavir on Tuesday November 16, 2021 @03:30PM (#29245994)
In what way? I'd be curious to understand what it is you value about them, but your post reads more like marketing than a satisfied customer story.
Re:I hate password rules by fossuser on Tuesday November 16, 2021 @03:47PM (#29246172)
No fees, also a brokerage, free checks, free atm, free wires, can trivially spin up IRA, move money between accounts, etc.

Phone call support has been surprisingly good whenever I’ve needed it.

When I used standard banks they often forced me to go in at difficult hours to do basic things and it took forever. They also had lots of fees (and as suggested in the parent comment, bad software)

Re:I hate password rules by pwillia7 on Tuesday November 16, 2021 @07:25PM (#29248033)
I fully agree. The difference is the value exchange. At a normal bank they just want to charge you fees because you cost them money. Fidelity lets you keep your money with them in the hopes that as you grow your money, you'll spend it on their investment products, which I imagine everybody does.

Most brokers have some kind of cash account and they're always better than banks and almost always better than credit unions.

I recommend keeping a credit union account open too so you have a local branch if you need something in person.

Re:I hate password rules by reaperducer on Tuesday November 16, 2021 @01:29PM (#29244492)
You state that you don't understand why people use large, complex banks. Then state that you have a very simple, financially uninteresting life.

You answered your own question.

Re:I hate password rules by fossuser on Tuesday November 16, 2021 @01:32PM (#29244542)
I have a pretty complex financial situation, but Fidelity can just do all of it more easily than retail banks.

Is there something banks like BoA do better that I'm missing? When I've asked people I know this I haven't gotten any good answers. I'm genuinely asking.

My impression is that BoA, Wells Fargo, etc. mostly take advantage of customers that don't know better options exist.

Re:I hate password rules by reaperducer on Tuesday November 16, 2021 @03:22PM (#29245911)
Your impression may come from the fact that many people don't talk openly about their finances to random people on the internet.

For me, Fidelity is a non-starter, for reasons that are none of your business.

It's nice that you like Fidelity. But it's a good idea to recognize that your finances and life situation are unique to you.

Re:I hate password rules by fossuser on Tuesday November 16, 2021 @03:50PM (#29246197)
Cool - so a non-answer and condescending dismissal of genuine questions.

Lots of people talk about finances online. See r/personalfinance or r/financialindependence. It’s a good way to learn.

Re:I hate password rules by reaperducer on Tuesday November 16, 2021 @04:00PM (#29246290)
I am not "lots of people." I have no interest in being "lots of people," or in proving myself to strangers on the internet.

I cannot convey 50 years of my financial life, experience, and history into what fits in an internet post. Anyone who can probably has a very narrow view of finance. I can say that I know how to manage my finances, and my accountant agrees with my methods and track record.

But if you think Reddit is the route to financial literacy, I can understand why you don't understand.

Re:I hate password rules by recursive on Tuesday November 16, 2021 @05:37PM (#29247170)
I don't necessarily think Reddit is a good route to financial literacy. Nor do I know of a better route. Despite (or because?) of all that, I still think the question was reasonable. If you don't want to answer the question, that's fine. But you don't have to be so antagonistic about it.
Re:I hate password rules by vangelis on Tuesday November 16, 2021 @04:15PM (#29246441)
That response is awfully unconstructive and dismissive. Perhaps you're able to articulate why you believe Reddit, specifically r/personalfinance and other reasonable boards, are bad, no?
Re:I hate password rules by pbhjpbhj on Tuesday November 16, 2021 @12:10PM (#29243141)
So, for a bank the maximum is to allow NSA to crack it if they wish, right?
Re:I hate password rules by reaperducer on Tuesday November 16, 2021 @12:19PM (#29243281)
They kept insisting that a 20-character password is safer than one with 30 characters. I couldn't get them to understand otherwise.
Re:I hate password rules by genewitch on Wednesday November 17, 2021 @11:48AM (#29255431)
On nsa.gov for a long time the max password length was 12 characters. Last checked in 2016.