Last week, I tried to register for a service and was really surprised by a password limit of 16 characters. Why on earth yould you impose such strict limits? Never heard of correct horse battery staple?

  • @[email protected]
    link
    fedilink
    391 month ago

    A prominent Australian bank has these requirements:

    For Internet Banking, your password must be six to eight characters long.

    To improve security, it should:

    contain both numbers and letters.
    include upper and lower-case letters (your password is case sensitive).

    • @[email protected]
      link
      fedilink
      English
      101 month ago

      8 character max means they’re running it on a mainframe I think, though I don’t know enough about mainframes to know if this is a normal level of bad or really bad

      • Rhaedas
        link
        fedilink
        71 month ago

        Could be (probably still is) running COBOL. It’s a combination of “if it works and costs money to upgrade, why change” but mostly “if we migrate one thing it will break five other things”.

    • @[email protected]
      link
      fedilink
      English
      71 month ago

      8??? For banking? I haven’t used less than like 16 in at least 5, maybe 10 years. Jeez.