To me is simply seems unintuitive to limit a field that is supposed to be secure.
I would expect any reasonable software to be able to accept a minimum of 32 characters and anything from the unicode library. This is trivial from a programming perspective. Perhaps they need to upgrade their programming team.
As for legacy systems... Well, perhaps they need an upgrade. It is no longer 1980.
I'm also another that is annoyed by the BNZ netguard card system & the maximum password limit. I end up just scanning the card and storing it on my computer somewhere not very obvious.
I can deal with weird password constraints, its the confirm email box that makes me rage. You used to only have to type in your email address once, recently I have noticed a number of websites making you type your email address in twice. Through a process of dodgy maths and ridiculous trend assumptions, I can only assume that in the near future, I will need to confirm my confirmation of my email address....
I now store just about all my passwords in 1password on my mac and iphone, this stores its encrypted contents on dropbox.
I have browser integration for Safari, Chrome and Firefox on my mac. I remember there being a Windoze version being developed as well.
Seems pretty good for me, it means all my passwords like ******** are safe enough with an encrypted backup of iphone data, and remote wipe of my iphone if the passcode is wrong too many times.
Sure the NSA probably know my login details for geekzone, but that is cool unless they start trolling in my name.
nate: The ones that irk me are sites that ask for at least one uppercase, one lowercase, one punctuation mark, at least x length, plus it can't have been used before.
You end up with a god awful password you can't remember. One guy here has his password as "Providerxsucks1!"
That is to stop qwerty or 123456 or password or any number of other dumb passwords that an amazing number of people otherwise use.
one uppercase, one lowercase, one punctuation mark, at least x length, plus it can't have been used before.... and you have to change it every three months... Ha!
So what happens? People write it on a post-it note and put it beside their monitors. (is that how you know what that guy's password is?)
Surely a dumb password is better than a written down password.
I believe many sites/services insist of no more than 8 character passwords because they are using Crypt authentication, which only uses the first 8 bytes or 8 ASCII characters. I've seen some web logins authenticate with only the first 8 characters despite a chosen passwords being longer.
I thought it was rather strange that ASB only allowed a maximum of 8 characters. Seems most banks do this also (quick google search)
Personally it doesnt bother me. I signed up for the Net Code key fob offer that they had. Means my account is nice and secure, If someone breaks in, there is no way of transfering any money out to another account without the key fob. (you can set the limit to any amount, but i set mine to $1)
There is stuff online about restricting characters which they say is normal if devs want to stop SQL injection scripts, or the sites have firewalls that detect and block SQL Injection.
Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.
Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly
to your computer or smartphone by using a feed reader.
Trusted
ID Verified
