Don’t forget the even stupider variant, the allow-list of like 5 symbols. “Tell ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

xp84 on May 21, 2023 | parent | context | favorite | on: Ask HN: I have 176 logins/accounts. How many do yo...

Don’t forget the even stupider variant, the allow-list of like 5 symbols. “Tell me you failed infosec 101 without telling me you failed infosec 101.”

NegativeK on May 21, 2023 [–]

There's a local government website that requires eight or fewer characters, and the eighth character has to be a digit.

They've tried to change the requirement, but it comes from vendor software. The vendor just waves around a middle finger and points to the contract.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact