3 ms·
My bank limits passwords to at most 5 alphanumerical characters. Yup. Five. There are over ten times more possible customer IDs (10 digits) than passwords.
by lorenzhs 10y ago
My bank limits passwords to at most 5 alphanumerical characters. Yup. Five. There are over ten times more possible customer IDs (10 digits) than passwords.
- vinay427 10y agoOut of curiosity, what bank is this?
- lorenzhs 10y agoThe Sparkassen in Germany do this, but they're not alone in doing so. They lock you out after a couple of attempts, so brute-force is out, but it's still dumb.
- clarkcox3 10y ago> so brute-force is out Until someone gets ahold of a list of the hashed passwords and can brute force them at home without triggering the lockout.