News for hackers. Stuff that matters.

A comment on I hate password rules. Parent comment

Re:I hate password rules by iso1631 on Tuesday November 16, 2021 @03:12PM (#29245810)
As it's a bank that's probably the case, but you could have a change on the server side from

  hash($password) == $storedhash
to

  hash(substr($password,0,20)) == $storedhash
And you wouldn't get in, with any password (including just putting in the first 20 characters)
[ Parent | on HN ]

There are no comments on this comment yet.