464
submitted 2 months ago* (last edited 2 months ago) by qaz@lemmy.world to c/mildlyinfuriating@lemmy.world

Just take the string as bytes and hash it ffs

you are viewing a single comment's thread
view the rest of the comments
[-] Eiri@lemmy.world 54 points 2 months ago

You remind me of my bank about 17 years ago. Everyone had to have a 10-character password, exactly, and it had to include exactly 2 numbers and 1 symbol. I wasn't very knowledgeable about computers at the time and it already felt dumb.

[-] Wogi@lemmy.world 36 points 2 months ago

A few years ago my ISP pushed an update to my router that changed the password requirements, invalidating my passwords. Because I couldn't enter the old password I also couldn't change the password. I had to do a factory reset.

[-] JackbyDev@programming.dev 20 points 2 months ago

Feels odd to check the password requirements on the enter password screen in addition to the new password screen.

[-] silasmariner@programming.dev 3 points 2 months ago

Might be checking the old password on the new password screen. Easy programming mistake to make I guess? Apply the same validation to all 3 password fields...

[-] JackbyDev@programming.dev 2 points 2 months ago

Ahhh, good catch! You are probably a master of code reviews and QA!

[-] Eiri@lemmy.world 5 points 2 months ago

Wow that's a big oops

[-] Glitterbomb@lemmy.world 2 points 2 months ago

ISP worker here. Our chosen routers default to an 8 digit password, the first 4 are the last 4 of the mac in hex, which anyone can easily see being broadcast by the wifi network. The last 4 are a part of a unique serial number, but its just 0-9. Ultimately, if you try to brute force this default password, you need 10000 tries. It takes a regular GPU 2 minutes with hashcat. It baffles my mind that companies think this is OK.

[-] ByteOnBikes@slrpnk.net 15 points 2 months ago

17 years ago, jeez. My credit Union's website is like that. Only its between 8-12 characters. No more, no less.

It's terrifying.

[-] RecluseRamble@lemmy.dbzer0.com 11 points 2 months ago

At that time my bank allowed up to 6 digits as a password. I kid you not, like a card PIN but for online banking login. I believe the whole banking security relies on their backoffices still running on paper.

[-] Eiri@lemmy.world 4 points 2 months ago

That's what my current bank uses for the web portal now to think of it. Client number, and 6-number PIN. I guess they're only doing this because they really trust their "unusual activity" protocols, but I've got a feeling they really shouldn't only rely on those.

this post was submitted on 26 Aug 2024
464 points (95.5% liked)

Mildly Infuriating

35459 readers
217 users here now

Home to all things "Mildly Infuriating" Not infuriating, not enraging. Mildly Infuriating. All posts should reflect that.

I want my day mildly ruined, not completely ruined. Please remember to refrain from reposting old content. If you post a post from reddit it is good practice to include a link and credit the OP. I'm not about stealing content!

It's just good to get something in this website for casual viewing whilst refreshing original content is added overtime.


Rules:

1. Be Respectful


Refrain from using harmful language pertaining to a protected characteristic: e.g. race, gender, sexuality, disability or religion.

Refrain from being argumentative when responding or commenting to posts/replies. Personal attacks are not welcome here.

...


2. No Illegal Content


Content that violates the law. Any post/comment found to be in breach of common law will be removed and given to the authorities if required.

That means: -No promoting violence/threats against any individuals

-No CSA content or Revenge Porn

-No sharing private/personal information (Doxxing)

...


3. No Spam


Posting the same post, no matter the intent is against the rules.

-If you have posted content, please refrain from re-posting said content within this community.

-Do not spam posts with intent to harass, annoy, bully, advertise, scam or harm this community.

-No posting Scams/Advertisements/Phishing Links/IP Grabbers

-No Bots, Bots will be banned from the community.

...


4. No Porn/ExplicitContent


-Do not post explicit content. Lemmy.World is not the instance for NSFW content.

-Do not post Gore or Shock Content.

...


5. No Enciting Harassment,Brigading, Doxxing or Witch Hunts


-Do not Brigade other Communities

-No calls to action against other communities/users within Lemmy or outside of Lemmy.

-No Witch Hunts against users/communities.

-No content that harasses members within or outside of the community.

...


6. NSFW should be behind NSFW tags.


-Content that is NSFW should be behind NSFW tags.

-Content that might be distressing should be kept behind NSFW tags.

...


7. Content should match the theme of this community.


-Content should be Mildly infuriating.

-At this time we permit content that is infuriating until an infuriating community is made available.

...


8. Reposting of Reddit content is permitted, try to credit the OC.


-Please consider crediting the OC when reposting content. A name of the user or a link to the original post is sufficient.

...

...


Also check out:

Partnered Communities:

1.Lemmy Review

2.Lemmy Be Wholesome

3.Lemmy Shitpost

4.No Stupid Questions

5.You Should Know

6.Credible Defense


Reach out to LillianVS for inclusion on the sidebar.

All communities included on the sidebar are to be made in compliance with the instance rules.

founded 1 year ago
MODERATORS