• MicrowavedTea@infosec.pub
    link
    fedilink
    arrow-up
    34
    ·
    1 month ago

    It’s also possible there’s a hidden max password size somewhere, like some fields only counting the first x characters of the password but it’s inconsistent across different forms.

    • Midnight Wolf@lemmy.world
      link
      fedilink
      English
      arrow-up
      11
      ·
      edit-2
      1 month ago

      USAA is guilty of this shit. Let’s you set a huge password. Truncates it. Doesn’t tell you about it. Error when logging in.

      I want to beat the motherfucker behind this strategy.

      E: Kagi too. I bitched out the support and I got a ‘meh, it should have told you’ response. Fix your shit.

      • MicrowavedTea@infosec.pub
        link
        fedilink
        arrow-up
        6
        ·
        1 month ago

        Not sure what is worse, not telling you and giving an error or not telling you and letting you log in (ie truncating the password both times, letting you think your password is longer than it is)