560
Uh oh, somebody's not following best practices, that's a paddlin (lemmy.world)
submitted 2 months ago by cm0002@lemmy.world to c/cybersecuritymemes@lemmy.world
103 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[-] MicrowavedTea@infosec.pub 33 points 2 months ago

It's also possible there's a hidden max password size somewhere, like some fields only counting the first x characters of the password but it's inconsistent across different forms.

[-] wreckedcarzz@lemmy.world 9 points 2 months ago* (last edited 2 months ago)

USAA is guilty of this shit. Let's you set a huge password. Truncates it. Doesn't tell you about it. Error when logging in.

I want to beat the motherfucker behind this strategy.

E: Kagi too. I bitched out the support and I got a 'meh, it should have told you' response. Fix your shit.

[-] MicrowavedTea@infosec.pub 5 points 2 months ago

Not sure what is worse, not telling you and giving an error or not telling you and letting you log in (ie truncating the password both times, letting you think your password is longer than it is)

[-] JcbAzPx@lemmy.world 2 points 2 months ago

The first is more annoying, the second is scummier.

this post was submitted on 26 May 2025
560 points (96.4% liked)

Cybersecurity - Memes

3125 readers
1 users here now

Only the hottest memes in Cybersecurity

founded 2 years ago
MODERATORS
Sam1232188@lemmy.world
neurohost@lemmy.world
Sam1232188@lemmy.fmhy.ml
Alphadef@programming.dev
CannaVet@lemmy.world