Cybersecurity - Memes

2089 readers

2 users here now

Only the hottest memes in Cybersecurity

founded 2 years ago

MODERATORS

851

Password length requirement (feddit.org)

submitted 5 months ago* (last edited 5 months ago) by [email protected] to c/cybersecuritymemes

170 comments fedilink hide all child comments

Last week, I tried to register for a service and was really surprised by a password limit of 16 characters. Why on earth yould you impose such strict limits? Never heard of correct horse battery staple?

you are viewing a single comment's thread
view the rest of the comments

[–] HowManyNimons 23 points 5 months ago (2 children)

ADD FIELD PASSWORD VARCHAR(16)

[–] [email protected] 10 points 5 months ago

SELECT * FROM users WHERE name = "$name" OR password = "$password"

[–] [email protected] 6 points 5 months ago* (last edited 5 months ago) (2 children)

sqlquery = "INSERT INTO users (username, password) VALUES ('" + username + "', '" + password + "')"

What could go wrong?

[–] Gremour 14 points 5 months ago* (last edited 5 months ago) (1 children)

Password=a");drop table users;--

Alas, it's longer than 16 characters. Protection works!

[–] [email protected] 5 points 5 months ago

They often don't allow semicolons but it's never stopped me from checking