Thread

<input type="password" maxlength="20"> prevents me from logging into Vanguard

66 points · 99 comments · tanin

vegetablepotpie · 1790984366 · focus · HN ↗
These are the same companies that state that users are responsible for choosing secure passwords… and then they make this as difficult as possible to do.
Finance needs to be held accountable. They’ve skim off far too much wealth for the value they produced.
1. sippingabonedry · 1790984479 · focus · HN ↗
  > they make this as difficult as possible to do.
  They provided password requirements which he ignored.
  > Finance needs to be held accountable.
  Accountable for what, exactly?
  1. nemomarx · 1790984529 · focus · HN ↗
    if the requirements make it less secure, isn't that the issue op is complaining about? max lengths are an anti feature.
    sippingabonedry · 1790984629 · focus · HN ↗
    Do you believe a 64-character password is magically more secure than a 20-character when they lockout your account after a few wrong tries? Delusion.
    altermetax · 1790984836 · focus · HN ↗
    Locking you out after a few wrong tries only protects against online attacks. If someone gets access to the database, they have as many attempts as they want.
    phatfish · 1790985513 · focus · HN ↗
    Brute force a strong 20 character password? Won't the sun have burnt out by the time that is done?
    I use strong 12 character passwords at work, on the off chance i have to type them out. And as a favour to anyone else that might have to.
    xigoi · 1791010299 · focus · HN ↗
    For a 20-character password to be strong, you pretty much need to use random characters; you cannot use the superior “correct horse battery staple” approach as you’d be limited to two words, which isn’t very secure.
    phatfish · 1791032759 · focus · HN ↗
    True, a pass phrase is a reasonable use of "passwords" >20 characters.

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.