Show HN: A visual HTML5 animation editor in your browser

Re:Show HN: A visual HTML5 animation editor in your browser by wyuenho on Friday March 07, 2014 @12:47PM (#7361609)

I'd love to try this out as I've been looking for something like for a long time. But I can't use it because I can't sign up with a password longer than 16 characters. This is a rookie security mistake that I see over and over again and makes me worry. As a rule of thumb, you should NOT limit the length of a password. Salting will take care of the weak password problem and a long password is, well, the securer the better.

Edit: use a secure hash on the password before storing into the database

[ Parent | on HN ]

Re:Show HN: A visual HTML5 animation editor in your browser by protonfish on Friday March 07, 2014 @01:05PM (#7361723)

Correct assessment - wrong solution. If you hash your passwords the stored result will always be the same fixed length. Do that (which you should anyhow for security reasons) and you don't need to mess with changing your database.

[ Parent | on HN ]

Re:Show HN: A visual HTML5 animation editor in your browser by wyuenho on Friday March 07, 2014 @01:39PM (#7361889)

Yep you are right, it's late here on a Friday night and my brain flashed bcrypt and scrypt's differing lengths for a second. Now that I looked back I was like, the hell? LOL oh man thanks for the correction.

[ Parent | on HN ]

Re:Show HN: A visual HTML5 animation editor in your browser by skavish on Friday March 07, 2014 @01:06PM (#7361737)

we do use PostgreSQL and there are no any restrictions on the length in the database. it seems the limitation only in the UI, will be fixed asap.

[ Parent | on HN ]