News for hackers. Stuff that matters.

A comment on eBay customers’ personal data was compromised in March. Parent comment

Re:eBay customers’ personal data was compromised in March by andrewpi on Wednesday May 21, 2014 @11:37AM (#7778808)
You think that's bad? Charles Schwab Bank only allows you 8 characters for the password. No special characters either.
[ Parent | on HN ]
Re:eBay customers’ personal data was compromised in March by chrismonsanto on Wednesday May 21, 2014 @11:52AM (#7778881)
You'd think regulations would prohibit nonsense like that.
[ Parent | on HN ]
Re:eBay customers’ personal data was compromised in March by k3oni on Wednesday May 21, 2014 @01:43PM (#7779597)
Have the same issue with my bank.. err credit union. You can't use any special character in the password.

Who comes up with these damn ideas when you are dealing people's money and information?

[ Parent | on HN ]
Re:eBay customers’ personal data was compromised in March by ssharp on Wednesday May 21, 2014 @12:04PM (#7778954)
AMEX also has surprising restrictive passwords.

Is the security surrounding password resets so bad that it's more secure to force easier to remember passwords?

[ Parent | on HN ]
Re:eBay customers’ personal data was compromised in March by alxndr on Wednesday May 21, 2014 @06:41PM (#7781176)
So does Discover. When I wouldn't take "just because" for an answer, IIRC the explanation was that it resulted in fewer password reset requests, so I believe your take is correct.
[ Parent | on HN ]
Re:eBay customers’ personal data was compromised in March by elithrar on Wednesday May 21, 2014 @07:02PM (#7781261)
It's more likely to be cheaper: less support calls/emails.
[ Parent | on HN ]
Re:eBay customers’ personal data was compromised in March by addandsubtract on Wednesday May 21, 2014 @12:07PM (#7778971)
The 2 banks I have to deal with online both require 5 characters. Fwiw, they at least lock your account after 3 wrong entries.
[ Parent | on HN ]
Re:eBay customers’ personal data was compromised in March by danielweber on Wednesday May 21, 2014 @02:28PM (#7779887)
I still get mail from Bank Of America -- where I no longer have an account because their fraud department decided to stop paying my mortgage -- about someone trying to log into my account. About once a week. I could spam filter it but it reminds me not to go back.
[ Parent | on HN ]