5 ms·

Or how about "Sorry, your password may be at most 12 characters long". Grinds my bloody gears. What irritates me more is knowing that the people who implement

by rekoil 4y ago

Or how about "Sorry, your password may be at most 12 characters long". Grinds my bloody gears. What irritates me more is knowing that the people who implement those solutions are probably here. Shame on you, go back and fix it right now!

bacheaul 4y ago
More likely, people who are here are forced to implement security policies adopted by cybersecurity teams that have long since left the company, and the current cyber teams have no incentive or desire to changed said policies.
fbdab103 4y ago
My favorite faux security thing I have run observed in the wild: Login with your password. Site then responds that we emailed you a security code, but the security code expires in five minutes. Immediately below that, it notes that the email may take up to four minutes to send. From experience, I think the note about slow emails is accurate. Who spent more than 30 seconds on that implementation thinking it was acceptable? Note that this is for a stupid intra-company fitness tracking thing (ie, I do not care at all about this data). Confirmation codes from my bank have a 30 minute window, but that is evidently too lax for step counting.
- pbhjpbhj 4y ago
  AliExpress! They give you something like 30s to enter the "2FA" code to log in, only it takes ~20s for the SMS to get to me. Took me 3 tries.
  - atoav 4y ago
    As someone who just a week ago implemented a similar thing: SMS sucks. Sending it can take any amount of time it seems. Sometimes <10s sometimes a minute or more and unless you get a report from your provider you don't know which it was. The only reasonable solution was to adjust the timeout of the sent token.
  - hyperman1 4y ago
    Last time I was there, I actually couldn't get the login screen to appear. Clicking login grays the site out and draw 2 useless horizontal lines. Only clicking 'create account' and then switching to 'already have an account' gives me a login screen. As a bonus, mistranslations are so bad the text on the 'create account' and 'already have an account' are identical. You have to guess which dialog is which. All of this on firefox with ad blocker, maybe chrome is better. Now that whole site has the weirdest bugs. When I go to the mailbox, the site switches to some eastern european language. The things we do for cheap electronic components ...
smileybarry 4y ago
Yeah, love how my bank has a password length requirement of "8 to 14 characters".
deleted 4y ago
[deleted]

by rekoil 4y ago

bacheaul 4y ago

More likely, people who are here are forced to implement security policies adopted by cybersecurity teams that have long since left the company, and the current cyber teams have no incentive or desire to changed said policies.

fbdab103 4y ago

My favorite faux security thing I have run observed in the wild: Login with your password. Site then responds that we emailed you a security code, but the security code expires in five minutes. Immediately below that, it notes that the email may take up to four minutes to send. From experience, I think the note about slow emails is accurate. Who spent more than 30 seconds on that implementation thinking it was acceptable? Note that this is for a stupid intra-company fitness tracking thing (ie, I do not care at all about this data). Confirmation codes from my bank have a 30 minute window, but that is evidently too lax for step counting.

pbhjpbhj 4y ago
AliExpress! They give you something like 30s to enter the "2FA" code to log in, only it takes ~20s for the SMS to get to me. Took me 3 tries.
- atoav 4y ago
  As someone who just a week ago implemented a similar thing: SMS sucks. Sending it can take any amount of time it seems. Sometimes <10s sometimes a minute or more and unless you get a report from your provider you don't know which it was. The only reasonable solution was to adjust the timeout of the sent token.
- hyperman1 4y ago
  Last time I was there, I actually couldn't get the login screen to appear. Clicking login grays the site out and draw 2 useless horizontal lines. Only clicking 'create account' and then switching to 'already have an account' gives me a login screen. As a bonus, mistranslations are so bad the text on the 'create account' and 'already have an account' are identical. You have to guess which dialog is which. All of this on firefox with ad blocker, maybe chrome is better. Now that whole site has the weirdest bugs. When I go to the mailbox, the site switches to some eastern european language. The things we do for cheap electronic components ...

smileybarry 4y ago

Yeah, love how my bank has a password length requirement of "8 to 14 characters".

deleted 4y ago

[deleted]