News for hackers. Stuff that matters.

A comment on Stop validating email addresses with your complex regex. Parent comment

Re:Stop validating email addresses with your complex regex by chimeracoder on Thursday September 06, 2012 @10:58PM (#4487509)
No, you forcing me to include a number does not make my password more secure.

Weak password: correcthorsebatterystaplefoobarbaz

Strong password: password1

The worst is when they do that and enforce a maximum password of 8 or 12 characters (I'm looking at you, every bank in the US ever).

[ Parent | on HN ]
Re:Stop validating email addresses with your complex regex by RenierZA on Friday September 07, 2012 @05:17AM (#4488255)
Is the top password not stronger than the bottom one in your example?
[ Parent | on HN ]
Re:Stop validating email addresses with your complex regex by mike-cardwell on Friday September 07, 2012 @05:27AM (#4488272)
That was his point. Web services incorrectly classifying the strength of user supplied passwords.
[ Parent | on HN ]
Re:Stop validating email addresses with your complex regex by mhartl on Saturday September 08, 2012 @01:49PM (#4493479)
The labels ("strong", "weak") are ironic.
[ Parent | on HN ]