3 ms·
In order to validate that my 16-char truncated password is correct, they would have to have my password stored somewhere. Standard security practice is to stor
by legatou 13y ago
In order to validate that my 16-char truncated password is correct, they would have to have my password stored somewhere.
Standard security practice is to store ONLY the hash of a password, and never the password text.
- heywire 13y agoWhat if they never stored more than 16 characters, and only recently added the message?
- 27182818284 13y agoI don't get that from the message though. To me it seems like they do a len() on the input box before it would ever be hashed or stored or anything like that on the server.