trustissue

Speaking of passwords, I just discovered that HN will ban your IP address from creating an account if you have a question mark in your password. I assume this is to help against SQL injection? (Not a security person here.) Pretty extreme result, but luckily I can post from another IP. I wonder how many users have hit this and not known why?

What system is this? I had used a 20+ character password on their website using my password manager to enter it every time. One day they said the password was wrong, which was unlikely since the password manager was entering it. I ended up doing a password reset and set it to something shorter like 15 characters, and then it worked. I don't know if they truncate or not, but they've definitely allowed much longer passwords than 6 or 7 characters. I've hit this issue with their website more than once so I know they've fixed it and re-broken it a few times in the past.