3 ms·
It is also a 'code smell' that suggests that the relevant company is storing passwords in plaintext. Reason: If they were hashing the password, the hash output
by pwg 11y ago
It is also a 'code smell' that suggests that the relevant company is storing passwords in plaintext.
Reason: If they were hashing the password, the hash output would be fixed length, independent of the input length, so there would be no need for an external, user visible, maximum length restrictions.
- mkobit 11y agoThat's an interesting and plausible take on it. Why do you think new companies still go the route of not allowing special characters (like <>;"()' and the other SQL injection types)? I would think that new companies would know better by now, but I guess not?