Thread

<input type="password" maxlength="20"> prevents me from logging into Vanguard

66 points · 99 comments · tanin

walrus01 · 1790984761 · focus · HN ↗
Until just 8 years ago one of the major Canadian nationwide banks was provably storing peoples' online banking logins in plaintext in some ancient mainframe database system. If you got to a sufficiently high level of customer service people in an account recovery process (like executor/probate process for the deceased) they could literally read back to you the entire password letter for letter.
And just ten years ago BMO required passwords to be exactly 6 char, no more, no less: <a href="https://www.reddit.com/r/PersonalFinanceCanada/comments/4t0mlk/bmo_only_allows_6_character_passwords_for_its/" rel="nofollow">https://www.reddit.com/r/PersonalFinanceCanada/comments/4t0m...
For the Americans who might not be aware of what BMO is (it's not some podunk small town bank): <a href="https://en.wikipedia.org/wiki/Bank_of_Montreal" rel="nofollow">https://en.wikipedia.org/wiki/Bank_of_Montreal
1. sippingabonedry · 1790986862 · focus · HN ↗
  > For the Americans who might not be aware of what BMO is
  Maybe news hasn't traveled north and broadcast on the CBC, so maybe you haven't heard, but BMO has branches all over the US.
  1. walrus01 · 1790987197 · focus · HN ↗
    Yes, as the result of certain acquisitions, much as you can see the banks that TD acquired and rebranded particularly on the US east coast. But not everywhere and not as prevalent as like a Bank of America or Wells Fargo or Citibank. There's huge swathes of the US that have zero BMO brand name presence.
    Additionally First Citizens acquired a bunch of "BMO" branchs and is presumably converting them back to their branding.
    <a href="https://www.google.com/search?client=firefox-b-d&q=first+citizens+bank+acquires+BMO+USA+branches" rel="nofollow">https://www.google.com/search?client=firefox-b-d&q=first+cit...

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.