News for hackers. Stuff that matters.

A comment on I hate password rules. Parent comment

Re:I hate password rules by nzach on Tuesday November 16, 2021 @12:27PM (#29243408)
>Or worse, they truncate your password after you've already used it for years and years.

Worse than that must be the sudden realization that your bank probably saves your password in plain text somewhere.

[ Parent | on HN ]
Re:I hate password rules by iso1631 on Tuesday November 16, 2021 @03:12PM (#29245810)
As it's a bank that's probably the case, but you could have a change on the server side from

  hash($password) == $storedhash
to

  hash(substr($password,0,20)) == $storedhash
And you wouldn't get in, with any password (including just putting in the first 20 characters)
[ Parent | on HN ]
Re:I hate password rules by bananasbandanas on Tuesday November 16, 2021 @04:49PM (#29246765)
More likely they just updated the password during a successful login.
[ Parent | on HN ]