3 ms·
The last time I was made to change my Chase password, I made it maximal length at the time (32 characters). However, it turned out their login page had an off-b
by syntheticnature 10y ago
The last time I was made to change my Chase password, I made it maximal length at the time (32 characters). However, it turned out their login page had an off-by-one error in the login page Javascript, such that it wouldn't let you type 32 characters in the field. I worked around it via using the browser debugging tools to fix the bug, then decided on a 30-character password as an additional margin of safety. They said they'd look into it, never heard back about it.
- Godel_unicode 10y agoFinding off-by-one errors in production code is a hobby of mine, but it's also pretty horrifying how often they're security-relevant.
- CamperBob2 10y agoYou're lucky they didn't send a SWAT team to your door for "hacking."