News for hackers. Stuff that matters.

A comment on Ubisoft hacked, account data compromised. Parent comment

Re:Ubisoft hacked, account data compromised by cookiecaper on Tuesday July 02, 2013 @01:17PM (#5979286)
No.

A potential common excuse may be, "No one will remember a secure password in excess of 16 characters, we are trying to minimize support volume", but this is not a "reasonable" excuse.

[ Parent | on HN ]
Re:Ubisoft hacked, account data compromised by groby_b on Tuesday July 02, 2013 @01:30PM (#5979385)
Yes. It's a DoS vector. The question is, what is a reasonable limit - and 16 characters fails horribly in that section.
[ Parent | on HN ]
Re:Ubisoft hacked, account data compromised by cookiecaper on Tuesday July 02, 2013 @01:37PM (#5979442)
Right, as the OP said, there is no reasonable excuse to limit character intake to less than multiple hundreds. I agree that some limit is sensible just to ensure someone doesn't insert War and Peace (or base64-encoded binaries or whatever) as their password.
[ Parent | on HN ]
Re:Ubisoft hacked, account data compromised by Brandon0 on Tuesday July 02, 2013 @03:37PM (#5980213)
I was using War and Peace -- now I have to go change my passwords. Thanks!
[ Parent | on HN ]
Re:Ubisoft hacked, account data compromised by kibibu on Wednesday July 03, 2013 @02:53AM (#5982892)
...a dependence of which we are not conscious.2
[ Parent | on HN ]