4 ms·

>I am a professional computer programmer. If I can't figure out how to reset a password on Skype, then what are the chances that a less technical person can do

by 1ris 10y ago

>I am a professional computer programmer. If I can't figure out how to reset a password on Skype, then what are the chances that a less technical person can do it? Had the same experience with the german postal service a few week ago. When you register there, you register for their shitty amazon-clone aswell. Turns out, you have only one account with one passwort, but the two sites have different password polices. My password had a '#' in it, witch wasn't allowed for the post part, but the passwort reset form didn't care, because it was allowed on the newer platform. You just can't login on the other and get no usefull error messages.

dangero 10y ago
Man that's bad. Enforcing password policies at sign-in seems like a terribly flawed idea.
- nitrogen 10y ago
  It can also happen if the API call to create the user on the other system is asynchronous and/or not checked for errors, and the API enforces the same (differing) password policy.
- hafreni 10y ago
  I wish password policies would be standardized, but then we'd have something like this happen: https://xkcd.com/927/ https://xkcd.com/927/
  - deleted 10y ago
    [deleted]
allendoerfer 10y ago
My hoster introduced a web firewall, which thought my password was a SQL injection and gave me a plain 403 but was disabled when authenticated so allowed me to change my password to something offending again. Had a funny conversation with them where they insisted that this was beneficial, because SQL injections can happen as humans make mistakes. A few days before that another hoster updated its password policy and sent me a less secure password by mail. He also insisted that since he uses SMTP over SSL, there is nothing wrong with that. And on a not related note: The technical support lead of my dedicated mail hoster does not understand DKIM. I was trying to be reasonable and not focus on stuff others can do better, but it seems like you have to do everything by yourself if you want it done right.
- foota 10y ago
  When I first read this I thought the hoster _mailed_ your password to you. As in snail mail.

by 1ris 10y ago

dangero 10y ago

Man that's bad. Enforcing password policies at sign-in seems like a terribly flawed idea.

nitrogen 10y ago
It can also happen if the API call to create the user on the other system is asynchronous and/or not checked for errors, and the API enforces the same (differing) password policy.
hafreni 10y ago
I wish password policies would be standardized, but then we'd have something like this happen: https://xkcd.com/927/ https://xkcd.com/927/
- deleted 10y ago
  [deleted]

allendoerfer 10y ago

My hoster introduced a web firewall, which thought my password was a SQL injection and gave me a plain 403 but was disabled when authenticated so allowed me to change my password to something offending again. Had a funny conversation with them where they insisted that this was beneficial, because SQL injections can happen as humans make mistakes. A few days before that another hoster updated its password policy and sent me a less secure password by mail. He also insisted that since he uses SMTP over SSL, there is nothing wrong with that. And on a not related note: The technical support lead of my dedicated mail hoster does not understand DKIM. I was trying to be reasonable and not focus on stuff others can do better, but it seems like you have to do everything by yourself if you want it done right.

foota 10y ago
When I first read this I thought the hoster _mailed_ your password to you. As in snail mail.