News for hackers. Stuff that matters.

A comment on Ask HN: How did my LastPass master password get leaked?. Parent comment

Re:Ask HN: How did my LastPass master password get leaked? by gregsadetsky on Monday December 27, 2021 @07:28PM (#29708731)
I think that password case is a separate issue. If I remember correctly, many online services do "secretly" accept mixed cases for the same password (because users make more mistakes than they realize and it would be "annoying" to be too strict)

If you didn't receive a "Someone just used" email (with an IP that's completely geographically off from where you are) that's a good sign, of course.

[ Parent | on HN ]
Re:Ask HN: How did my LastPass master password get leaked? by zdragnar on Monday December 27, 2021 @08:00PM (#29709026)
I tried pushing back on just such a request once, pointing out it made of of the password "security" requirements pointless (use mixed case letters).

"But famous company X does this, it is really convenient for users!" was all the response I got. All I could do at the time was (internally) shake my head.

[ Parent | on HN ]