passwordistoostrong retweeted
Speaking of bad passwords...what does this even mean @Citi? CC: @PWTooStrong
passwordistoostrong retweeted
Great IT security @AetnaHelp does allow you to create a password longer than 20 characters, but then tells you at login that password cannot be longer than 20 characters... BUT the login works, as it simply takes the truncated password. @PWTooStrong
passwordistoostrong retweeted
It's a bunch of stupid rules, but at least it's all run together so unreadable!
@PWTooStrong
passwordistoostrong retweeted
Thanks @Lowes for weak policy … @PWTooStrong
passwordistoostrong retweeted
Replying to @PWTooStrong
@PWTooStrong Walmart Seller Center has a 15-character limit that they don't reveal to you automatically.
They silently accept your paste from a password manager, then truncate it to 15. No wonder I've done so many resets.
passwordistoostrong retweeted
Using long auto pswd generator:
Rejected! Because... shrug? I assume too long, but who knows. Doesn't show full rules, doesn't say perceived violation.
Love the needless parenthesis also!
@PWTooStrong
passwordistoostrong retweeted
Should I be worried that @InforegulatorSA @SaRegulator can't count to 20? #AskingForAFriend @PWTooStrong @troyhunt
passwordistoostrong retweeted
Replying to @PWTooStrong
@PWTooStrong Found another! Max length 15? No spaces? No single/double quotes allowed? This points to a messy past of poor appsec practices.
Time for a bit of public security shaming. How I know you're doing password storage wrong:
- Maximum length of 20 chars
- Not case sensitive (Wat!?!)
- I have a choice of 6 "special" chars that I can use
I'm calling you out, @LS_Loans.
passwordistoostrong retweeted
"no spaces allowed" @PWTooStrong
passwordistoostrong retweeted
Why @kotakneo why?
Curious under what circumstances max 10 char? Are you not hashing it?
cc: @PWTooStrong
passwordistoostrong retweeted
And another culprit for @PWTooStrong is @SouthwestAir!
passwordistoostrong retweeted
Seems my @PWTooStrong. And... username too weak?? Also wait a moment my password meets all your requirements!!
passwordistoostrong retweeted
broke: @PWTooStrong
woke: username too strong



























