Websites and Passwords

Forums › IT Pro › Websites and Passwords

1 | 2

myopinion

527 posts

Ultimate Geek

Subscriber

Reply # 467989 11-May-2011 16:55
Maybe they limit it to 7-8 as that is the usual maximum amount that an average person can remember in short term memory?

987 posts

Ultimate Geek

Reply # 467995 11-May-2011 17:19
To me is simply seems unintuitive to limit a field that is supposed to be secure. I would expect any reasonable software to be able to accept a minimum of 32 characters and anything from the unicode library. This is trivial from a programming perspective. Perhaps they need to upgrade their programming team. As for legacy systems... Well, perhaps they need an upgrade. It is no longer 1980. Workstation: Intel DH67CL ~ i5-2500 ~ 4GB Corsair RAM (x2) ~ Intel X25-M 80GB SSD Laptop: Dell Inspiron 1564 ~ i5-520M ~ 4.00GB RAM ~ 500GB SATA HDD ~ Win7 Home Premium x64 Common misconceptions.

446 posts

Ultimate Geek

Reply # 468007 11-May-2011 18:02
I'm also another that is annoyed by the BNZ netguard card system & the maximum password limit. I end up just scanning the card and storing it on my computer somewhere not very obvious. I can deal with weird password constraints, its the confirm email box that makes me rage. You used to only have to type in your email address once, recently I have noticed a number of websites making you type your email address in twice. Through a process of dodgy maths and ridiculous trend assumptions, I can only assume that in the near future, I will need to confirm my confirmation of my email address....

676 posts

Ultimate Geek

Reply # 468520 12-May-2011 22:31
I now store just about all my passwords in 1password on my mac and iphone, this stores its encrypted contents on dropbox. I have browser integration for Safari, Chrome and Firefox on my mac. I remember there being a Windoze version being developed as well. Seems pretty good for me, it means all my passwords like ******** are safe enough with an encrypted backup of iphone data, and remote wipe of my iphone if the passcode is wrong too many times. Sure the NSA probably know my login details for geekzone, but that is cool unless they start trolling in my name. Jon

685 posts

Ultimate Geek

Trusted

Reply # 468698 13-May-2011 12:36
Nety: nate: The ones that irk me are sites that ask for at least one uppercase, one lowercase, one punctuation mark, at least x length, plus it can't have been used before. You end up with a god awful password you can't remember. One guy here has his password as "Providerxsucks1!" That is to stop qwerty or 123456 or password or any number of other dumb passwords that an amazing number of people otherwise use. one uppercase, one lowercase, one punctuation mark, at least x length, plus it can't have been used before.... and you have to change it every three months... Ha! So what happens? People write it on a post-it note and put it beside their monitors. (is that how you know what that guy's password is?) Surely a dumb password is better than a written down password.

1278 posts

Uber Geek

Trusted

Reply # 468965 13-May-2011 23:40
I believe many sites/services insist of no more than 8 character passwords because they are using Crypt authentication, which only uses the first 8 bytes or 8 ASCII characters. I've seen some web logins authenticate with only the first 8 characters despite a chosen passwords being longer.

822 posts

Ultimate Geek

Reply # 471661 20-May-2011 16:58
I thought it was rather strange that ASB only allowed a maximum of 8 characters. Seems most banks do this also (quick google search) Personally it doesnt bother me. I signed up for the Net Code key fob offer that they had. Means my account is nice and secure, If someone breaks in, there is no way of transfering any money out to another account without the key fob. (you can set the limit to any amount, but i set mine to $1) There is stuff online about restricting characters which they say is normal if devs want to stop SQL injection scripts, or the sites have firewalls that detect and block SQL Injection.

1599 posts

Uber Geek
Inactive user

Reply # 471671 20-May-2011 17:28
jaymz: I thought it was rather strange that ASB only allowed a maximum of 8 characters. Seems most banks do this also (quick google search) Not Westpac, I have a 18 character password with them.

1 | 2