‹ BackHN Continuity

Thread

<input type="password" maxlength="20"> prevents me from logging into Vanguard

66 points · 99 comments · tanin

  1. bootlooped · · focus · HN ↗
    My biggest question here is are they not just feeding the input into a hash function, why can&#x27;t it be longer than 20 characters?
    1. coaksford · · focus · HN ↗
      At some point you don&#x27;t want people to enter the bee movie script, but where the word &quot;bee&quot; was replaced with the entire bee movie script again, recursively three times, all into the password field and tie up servers with extremely long requests.

      But 20 characters is simply ridiculous.

      1. shermantanktop · · focus · HN ↗
        &lt;input type=&quot;password&quot; maxbeemovierecursions=&quot;2&quot;&gt;
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.