4 ms·

We've moved on to a fictitious setup. I was so disgusted with my bank and their password policies and authentication measures. They too restrict to 8 characters

by dekz 14y ago

We've moved on to a fictitious setup. I was so disgusted with my bank and their password policies and authentication measures. They too restrict to 8 characters, but they happen to also offer a SecurID token. This token can be used in conjunction with the initial authentication. I would happily switch to any bank where I can know my data is secure. How do we trust them?

X-Istence 14y ago
I have a student loan that is limited to 8 character passwords. Thing is, when you go to set your password the first time it will happily take the password and use it, good luck getting in though because the next time you go to enter your password the web form truncates it for you (using JavaScript upon submitting)! Then when you go to reset your password they keep telling you that your password doesn't meet the requirements (the form allows you to type as much as you want) but doesn't tell you about the 8 character password rule. Then when you finally get one that works and you are logged in (12345678 is not a secure password, but apparently that is fine) you go to change your password and this time they will tell you that 8 characters are all that is allowed, but the web form is set to only accept 7 characters, so you have to use the Safari Inspector to change the form to accept 8 characters and submit. And unfortunately I can't leave them because it is a loan and not just a checking account. Thing is, even I don't know my password anymore, so it is as secure as it can be :P
- creativeembassy 14y ago
  I had this problem with Windows 8 and creating a Microsoft Account. When creating the account, they had a hard limit of something like 15 characters. (My passwords are pretty long.) Which got automatically truncated. So when I rebooted my computer running Windows 8 Preview, I couldn't log in with the password I had used, until I figured out that I should only type the first 15 characters of it. Terrible web form design.
- codeodor 14y ago
  > And unfortunately I can't leave them because it is a loan and not just a checking account. You may be able to refinance the loan through another bank, which would pay off this one and let you go with someone more reasonable.
  - X-Istence 14y ago
    If I could get the same interest rate or lower I would do it, but as of right now I would get lucky if I could find one that gave me 3x the interest let alone higher...
peeters 14y ago
> We've moved on to a fictitious setup. Fictitious? Did you read the rules in the original post? > 2. It must contain at least one letter, one number, and one special character. > ... > 5. Two of the same characters sitting next to each other are considered to be a “set.” No “sets” are allowed.
- dekz 14y ago
  > Fictitious? Did you read the rules in the original post? Yes. The grand parent post isn't talking about these rules per se, just a fictitious example of HR and bad password practices.

by dekz 14y ago

X-Istence 14y ago

I have a student loan that is limited to 8 character passwords. Thing is, when you go to set your password the first time it will happily take the password and use it, good luck getting in though because the next time you go to enter your password the web form truncates it for you (using JavaScript upon submitting)! Then when you go to reset your password they keep telling you that your password doesn't meet the requirements (the form allows you to type as much as you want) but doesn't tell you about the 8 character password rule. Then when you finally get one that works and you are logged in (12345678 is not a secure password, but apparently that is fine) you go to change your password and this time they will tell you that 8 characters are all that is allowed, but the web form is set to only accept 7 characters, so you have to use the Safari Inspector to change the form to accept 8 characters and submit. And unfortunately I can't leave them because it is a loan and not just a checking account. Thing is, even I don't know my password anymore, so it is as secure as it can be :P

creativeembassy 14y ago
I had this problem with Windows 8 and creating a Microsoft Account. When creating the account, they had a hard limit of something like 15 characters. (My passwords are pretty long.) Which got automatically truncated. So when I rebooted my computer running Windows 8 Preview, I couldn't log in with the password I had used, until I figured out that I should only type the first 15 characters of it. Terrible web form design.
codeodor 14y ago
> And unfortunately I can't leave them because it is a loan and not just a checking account. You may be able to refinance the loan through another bank, which would pay off this one and let you go with someone more reasonable.
- X-Istence 14y ago
  If I could get the same interest rate or lower I would do it, but as of right now I would get lucky if I could find one that gave me 3x the interest let alone higher...

peeters 14y ago

> We've moved on to a fictitious setup. Fictitious? Did you read the rules in the original post? > 2. It must contain at least one letter, one number, and one special character. > ... > 5. Two of the same characters sitting next to each other are considered to be a “set.” No “sets” are allowed.

dekz 14y ago
> Fictitious? Did you read the rules in the original post? Yes. The grand parent post isn't talking about these rules per se, just a fictitious example of HR and bad password practices.