News for hackers. Stuff that matters.
Re:NXP has messed up their password form validation by iptq on Thursday June 29, 2023 @08:36AM (#36519546)
That's not the worst I've seen, either. Some other password sins include:

- the password validation fails for reasons not listed entirely

- the password box truncates passwords silently

Re:NXP has messed up their password form validation by psYchotic on Thursday June 29, 2023 @08:48AM (#36519668)
> - the password box truncates passwords silently

PayPal does this, which means I lost the ability to use PayPal for a few days because my password manager generated something longer than the 16(!) or so characters PayPal accepts. If you're going to implement a form to set or change a password, you should probably let it accept a length greater than whatever you're going to store and validate it client side (and in the backend for those who have javascript disabled, though you should validate in the backend anyway).