Thread

1. vegetablepotpie · 1790984366 · focus · HN ↗

   These are the same companies that state that users are responsible for choosing secure passwords… and then they make this as difficult as possible to do.

   Finance needs to be held accountable. They’ve skim off far too much wealth for the value they produced.

   1. sippingabonedry · 1790984479 · focus · HN ↗

      > they make this as difficult as possible to do.

      They provided password requirements which he ignored.

      > Finance needs to be held accountable.

      Accountable for what, exactly?

      1. nemomarx · 1790984529 · focus · HN ↗

         if the requirements make it less secure, isn't that the issue op is complaining about? max lengths are an anti feature.

         1. sippingabonedry · 1790984629 · focus · HN ↗

            Do you believe a 64-character password is magically more secure than a 20-character when they lockout your account after a few wrong tries? Delusion.

            1. altermetax · 1790984836 · focus · HN ↗

               Locking you out after a few wrong tries only protects against online attacks. If someone gets access to the database, they have as many attempts as they want.

               1. phatfish · 1790985513 · focus · HN ↗

                  Brute force a strong 20 character password? Won't the sun have burnt out by the time that is done?

                  I use strong 12 character passwords at work, on the off chance i have to type them out. And as a favour to anyone else that might have to.

                  1. altermetax · 1791001205 · focus · HN ↗

                     Are there disadvantages in allowing users arbitrarily long passwords (or with a very high limit, e.g. 256 bytes)? No.

                     Are there advantages? Yes: the longer the password is, the stronger it is. It doesn't matter if there's a specific point after which cracking takes time till the death of the universe. So there's no point in imposing a limit.

                     Besides, too many websites limit password length to ridiculous lengths like 12.

                     1. sippingabonedry · 1791003119 · focus · HN ↗

                        You should reach out to the developers of all the major operating systems and explain how they've been doing it wrong all these years because they all set hard limits.

Unofficial Hacker News client; not affiliated with Y Combinator.