4 ms·
Wouldn't that interfere with a password manager that auto-saves?
by mtoddsmith 5y ago
Wouldn't that interfere with a password manager that auto-saves?
- shawabawa3 5y agono basically the hashing algorithm they use strips out certain information, which means that e.g. "PaSSWord123" "pAsswORD123" "PaSSWord123 " etc all hash to the same value, and so are equivalent.
- sib 5y ago>> "PaSSWord123" "pAsswORD123" Wow - non-case-sensitive passwords seem like a bad idea...
- anoncake 5y agoPretty sure they don't do that for authentication.
- CJefferson 5y agoThey do, you can see a discussion here: https://security.stackexchange.com/questions/68013/facebook-password-lowercase-and-uppercase https://security.stackexchange.com/questions/68013/facebook-...
- anoncake 5y agoI didn't know it's still possible for Facebook to disappoint me.
- CJefferson 5y agoNot it's still case sensitive, you can just flip all the character's case. You are only losing "one bit" of password information.
- cratermoon 5y ago> it's still case sensitive, you can just flip all the character's case. How is "flipping all the character's case" different from case-insensitive?
- CJefferson 5y agoThey flip all character's case in one go, and also capitalise just the first character. So, if your password was: fishCAT They would accept fishCAT, and also FISHcat and FishCAT, and that's it.