3 ms·
I had a 16 character password which I used in an PC online-banking application. After an update the password was unable to unlock the database. So I started c
by qwertox 5y ago
I had a 16 character password which I used in an PC online-banking application.
After an update the password was unable to unlock the database.
So I started creating new databases with different passwords to see what was going on, and it turned out that all passwords longer than 10 characters were failing.
So I truncated my old password to 10 characters and then it worked. No hint, no nothing in the release notes.
- infogulch 5y agoI guess that means that it was silently truncating before the update.
- alliao 5y agoyikes? that means they knew your password therefore able to truncate it to 10 characters?!
- iso1631 5y agoNot neccersarily, if the previous version truncated the passed password to 10 characters, hashed, then stored, but the new version no longer truncated, the hash wouldn't match unless you used 10 characters if your password was qwerty123456, it might have allowed you in with qwerty1234999
- qwertox 5y agoI assume it was like iso1631 commented, that before the upgrade they truncated it before hashing it. In any case, using a password (=encrypting database) was optional, so my reaction to this experience was to remove the password and move the entire application into a VeraCrypt container.