Cybersecurity - Memes

2015 readers

2 users here now

Only the hottest memes in Cybersecurity

founded 1 year ago

MODERATORS

848

Password length requirement (feddit.org)

submitted 4 months ago* (last edited 4 months ago) by [email protected] to c/cybersecuritymemes

171 comments fedilink hide all child comments

Last week, I tried to register for a service and was really surprised by a password limit of 16 characters. Why on earth yould you impose such strict limits? Never heard of correct horse battery staple?

you are viewing a single comment's thread
view the rest of the comments

[–] x0x7 3 points 4 months ago* (last edited 4 months ago)

Ok. Take up to 65,536 bytes of utf8 string. Or better yet. Accept any password length. I mean any. But instead of transmitting it you bcyrpt on their machine and then use the resulting key to hmac sign a recent timestamp that can't be reused.