3 ms·
I've run across at least one banking site which accepted a password on the sign-up page which was later rejected by the login page. The validation scripts on th
by nybble41 5y ago
I've run across at least one banking site which accepted a password on the sign-up page which was later rejected by the login page. The validation scripts on the login page used a more limited set of permissible special characters which didn't include parentheses. Fortunately it was only a client-side check, so it was relatively simple to bypass it once using developer tools and change the password.
- marcod 5y agoAmerican Express at one point let me set a password over 8 characters, but logging in after only worked if I provided only the first 8.
- lozaning 5y agoAt one point I know they also weren't case sensitive.
- wtetzner 5y agoWhy would you ever validate the characters of a password on the login page? What a weird thing to do.