[conspire] Experian insecurity ...
Michael Paoli
Michael.Paoli at cal.berkeley.edu
Thu Nov 29 00:29:58 PST 2018
Way to go Experian insecurity <sigh>.
Will they never learn?
Me: picks nice secure 20 character password
Them: "Password is too long."
Me: ... 19 characters ...
Them: "Password is too long."
...
16 ... too long
15 ... the damn registration thingy still fails anyway.
There's no good reason to limit password/passphrase lengths ...
especially to anything rather to quite short. After all, what should
be getting stored is
only a secure hash of such, so that will be same length regardless of
password/passphrase length.
Yeah, still, far too many sites, etc., don't properly do/handle
passwords/passphrases.
Ah well, ... at least they have toll free number, and should eventually get
back to me (they tried to fix their basic brokenness on the phone but
were unable to).
More information about the conspire
mailing list