this post was submitted on 18 Aug 2024
845 points (99.0% liked)

Cybersecurity - Memes

1905 readers
2 users here now

Only the hottest memes in Cybersecurity

founded 1 year ago
MODERATORS
Sam1232188@lemmy.world
neurohost@lemmy.world
Sam1232188@lemmy.fmhy.ml
Alphadef@programming.dev
CannaVet@lemmy.world
845
Password length requirement (feddit.org)
submitted 1 month ago* (last edited 1 month ago) by cron@feddit.org to c/cybersecuritymemes@lemmy.world
171 comments fedilink hide all child comments
 

Last week, I tried to register for a service and was really surprised by a password limit of 16 characters. Why on earth yould you impose such strict limits? Never heard of correct horse battery staple?

you are viewing a single comment's thread
view the rest of the comments
[–] HowManyNimons@lemmy.world 23 points 1 month ago (2 children)

ADD FIELD PASSWORD VARCHAR(16)

[–] Sibbo@sopuli.xyz 10 points 1 month ago

SELECT * FROM users WHERE name = "$name" OR password = "$password"

[–] cron@feddit.org 6 points 1 month ago* (last edited 1 month ago) (2 children) 
sqlquery = "INSERT INTO users (username, password) VALUES ('" + username + "', '" + password + "')"

What could go wrong?

[–] Gremour@lemmy.world 14 points 1 month ago* (last edited 1 month ago) (1 children)

Password=a");drop table users;--

Alas, it's longer than 16 characters. Protection works!

[–] _bcron@midwest.social 5 points 1 month ago

They often don't allow semicolons but it's never stopped me from checking

[–] dsilverz@thelemmy.club 3 points 1 month ago (1 children)

John O'neill always wonder why there are all these strange computer errors around him when he is about to sign up something. Oh, John O'neill, poor guy...