Re:Passwords for JetBlue accounts cannot contain a Q or a Z
by pc86 on Wednesday May 14, 2014 @01:53PM
(#7745069)
Does this mean that passwords entered on the phone are hashed/encrypted in a case-insensitive manner? I don't understand how this can work unless you're doing the equivalent of .ToLower()/.ToUpper() on everyone on the back end.
[ Parent
| on HN ]
Re:Passwords for JetBlue accounts cannot contain a Q or a Z
by colanderman on Wednesday May 14, 2014 @03:31PM
(#7745774)
Not just case-insensitive, but character-group-agnostic. All the backend knows is that the user pressed "2"; it doesn't know whether that "2" means "A", "B", or "C". (Or, to my point, "a", "b", or "c".)
But you're making the mistake of assuming they're hashing passwords at all ;)
Re:Passwords for JetBlue accounts cannot contain a Q or a Z
by dredmorbius on Wednesday May 14, 2014 @04:07PM
(#7746034)
But you're making the mistake of assuming they're hashing passwords at all ;)
That, I think, is the correct inference.