Re:We'd lose our security certificate if we allowed pasting
by radicalbyte on Tuesday May 06, 2014 @05:03PM
(#7707075)
Actually, having weird password requirements might make them, on average, more secure.
Why? Because the passwords will be different.
The average person uses the same password over many sites. The chances of one of those sites being hacked/rogue is 100x higher than the bank getting hit. Weird requirements = different password = more secure.
Re:We'd lose our security certificate if we allowed pasting
by wlesieutre on Tuesday May 06, 2014 @09:26AM
(#7704258)
For a system that limits passwords to 6 letters, I bet they weren't hashing them to begin with. But maybe nchlswu fixed that.
Re:We'd lose our security certificate if we allowed pasting
by danielweber on Tuesday May 06, 2014 @09:31AM
(#7704285)
How often do major US banks have their password tables leaked? When was the last time it happened?
Sure, it's secure from a front-door perspective. But if say, a future unpatched software vulnerability leads to the password hashes being leaked (a when, not an if) the 6 letter password hashes are going to be mighty easy to crack.