News for hackers. Stuff that matters.

A comment on LastPass Security Notice. Parent comment

Re:LastPass Security Notice by dzhiurgis on Monday June 15, 2015 @09:41PM (#9723340)
Yeah that would be nice. I actually think browsers should have this as a feature.

But the problem is that not all websites accept long passwords. My bank wouldn't take longer than 8 characters and doesn't even have a second factor auth.

Office 365 wouldn't accept more than 16 characters. I think it was Paypal who wouldn't take more than 10.

[ Parent | on HN ]
Re:LastPass Security Notice by sosborn on Tuesday June 16, 2015 @12:40AM (#9723860)
> My bank wouldn't take longer than 8 characters

Ugh, that is seriously infuriating. Of all the websites I have accounts with, that's the top of my "Shit I care about" list.

[ Parent | on HN ]
Re:LastPass Security Notice by mynameisvlad on Tuesday June 16, 2015 @10:21AM (#9725968)
Be happy, one of my banks has a 6-digit numeric PIN (I shit you not) as their "security".
[ Parent | on HN ]
Re:LastPass Security Notice by rickyc091 on Tuesday June 16, 2015 @02:13PM (#9727719)
Banks also lock the accounts after 3 failed attempts though. The short passwords are to avoid having to deal with phone calls that go something like, "Hello, I forgot my password."
[ Parent | on HN ]
Re:LastPass Security Notice by dzhiurgis on Tuesday June 16, 2015 @06:35PM (#9729128)
Overlooking 6 characters vs 20 over a shoulder is must easier though.
[ Parent | on HN ]