News for hackers. Stuff that matters.

A comment on Stop validating email addresses with your complex regex. Parent comment

Re:Stop validating email addresses with your complex regex by erichocean on Thursday September 06, 2012 @06:02PM (#4486513)
Agreed that password validation is the worst. (Github, I'm looking at you.)

Even worse than excessive validation is when they make you change your password often, for no apparent reason.

On some sites that do both (ahem Apple), the only way I can login if I haven't been there in awhile is the security questions or the password reset mechanism.

[ Parent | on HN ]
Re:Stop validating email addresses with your complex regex by ch0wn on Friday September 07, 2012 @08:10AM (#4488641)
Wow, I never noticed that Github enforces password rules, as well (Must contain one lowercase letter, one number, and be at least 7 characters long.). My passwords are usually HMAC-based, so they'll most likely validate.
[ Parent | on HN ]
Re:Stop validating email addresses with your complex regex by jbn on Sunday September 09, 2012 @03:44PM (#4496726)
even validation of first & last names is usually awful. For instance many sites tell you that having a dash "-" in your first name is invalid... yet a lot of French (first or last) names contain that character..
[ Parent | on HN ]