4 ms·
I'm not familiar with Gawker, but just looking down the list, it appears that there is an 8-character limit on passwords: 124 swordfis 108 spiderma
by m_myers 16y ago
I'm not familiar with Gawker, but just looking down the list, it appears that there is an 8-character limit on passwords:
124 swordfis
108 spiderma
98 chocolat
90 elizabet
88 butterfl
79 basketba
(among others)
Why would anyone put a limit -- especially such a short one -- on password length? Please don't tell me it's because they want to store them as char(8).
- deleted 16y ago[deleted]
- k33l0r 16y agoThe DES hashing function that Gawker used/uses has an 8 character limit, so even if you chose a longer password it would get truncated to 8 characters on the server.
- qjz 16y agoThis suggests that some users might have had very strong passwords ("butterflyzrfr33!") that were truncated into weak prefixes ("butterfl"). I'll need to rethink my approach to passphrases to make sure they're "frontloaded" with stronger combinations in the first few characters. Like most people, I'm sure, I tend to tag these on to the end.