News for hackers. Stuff that matters.

A comment on Why Canada’s banks have weaker passwords than Twitter or Google. Parent comment

Re:Why Canada’s banks have weaker passwords than Twitter or ... by eli on Sunday June 08, 2014 @11:57AM (#7864986)
Writing new software is easy. Maintaining large, existing codebases for mission-critical software is hard. Banks were early adopters; there's fifty year old code that does some things extremely well, but also sometimes results in user-facing quirks like oddly limited password fields.
[ Parent | on HN ]
Re:Why Canada’s banks have weaker passwords than Twitter or ... by joesmo on Sunday June 08, 2014 @06:03PM (#7866075)
Good point. Assuming that the offending code is the actual password storage rather than an intermediary subsystem, one can safely make the assumption that such password storage is insecure. Which isn't much of a revelation, considering the article.
[ Parent | on HN ]
Re:Why Canada’s banks have weaker passwords than Twitter or ... by eli on Monday June 09, 2014 @12:08AM (#7866968)
Maybe true, but I've learned not to make assumptions about how large & complex systems work based only on the little piece I can see from the outside.
[ Parent | on HN ]