3 ms·
Amen, with a special F.U. to the sites that disallow special characters. What is the reason for that? (OK I might understand disallowing some uncommon chars but
by rb808 9y ago
Amen, with a special F.U. to the sites that disallow special characters. What is the reason for that? (OK I might understand disallowing some uncommon chars but $%(^ etc shouldn't be disallowed)
- darylfritz 9y agoWhy block anything at all? If I want my password to be unicode and emoji, what's the downside to the site? I assume they're hashing all the passwords anyway.
- feld 9y agohint: they're not all hashing the passwords
- jrimbault 9y agoI always wonder what kind of magic those websites do with the string. Hashing has become so simple. When you hash you don't have to worry about special chars (encoding issues though). It's only when you have bad practices that you should worry about ;") in the password field.
- jandrese 9y agoI wonder how many sites have been taking down by SQL injection attacks inside of a password. That would take something of a perfect storm of bad design, which is why I'm pretty sure there are sites out there that are vulnerable.
- twh270 9y ago> I assume they're hashing all the passwords anyway. Bad assumption. And many that do hash are using MD5 and don't bother salting.
- pwg 9y ago> sites that disallow special characters This is often an external code smell of not hashing the passwords but instead storing them as plaintext in a CHAR(8) field in a SQL database somewhere.