News for hackers. Stuff that matters.

A comment on Elastic Cloud password complexity has an “OR” condition. Parent comment

Re:Elastic Cloud password complexity has an “OR” condition by Fire-Dragon-DoL on Tuesday January 10, 2023 @03:27AM (#34322001)
Or you find one of those lovely sites where the password has a max length and they tell you it, but instead of validating, they truncate the password and save silently.

Oh, of course they truncate also the password confirmation field.

[ Parent | on HN ]
Re:Elastic Cloud password complexity has an “OR” condition by cafeinux on Tuesday January 10, 2023 @03:40AM (#34322083)
My favourite is when you enter a long password, and it fails with the error message "Your password must contain special characters" or some other message that nothing to do with the condition that is not met.
[ Parent | on HN ]
Re:Elastic Cloud password complexity has an “OR” condition by Yoric on Tuesday January 10, 2023 @04:08AM (#34322227)
My favorite must have been the website that informed me that my password was invalid, when it actually didn't like my last name (forgot the specifics – I think that's because there was a dash in the name?)
[ Parent | on HN ]