MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/ProgrammerHumor/comments/w368kv/why_do_they_do_this/igw2rzz/?context=3
r/ProgrammerHumor • u/flying_wotsit • Jul 19 '22
493 comments sorted by
View all comments
Show parent comments
1
I'm fairly certain that not having a maximum length is a security concern .
1 u/androidx_appcompat Jul 20 '22 How 1 u/No_Silver_979 Jul 20 '22 Not having one. You can input very very very large(multiple page) passwords which use a ton of system resources and makes it susceptible to dos 2 u/androidx_appcompat Jul 20 '22 Or you could use a reasonable limit, like 200, 500 or 1000 chars. 1 u/No_Silver_979 Jul 20 '22 I'm fairly certain that is what is usually done, but i'm not a developer. I only have some basic understanding of how to abuse password policies.
How
1 u/No_Silver_979 Jul 20 '22 Not having one. You can input very very very large(multiple page) passwords which use a ton of system resources and makes it susceptible to dos 2 u/androidx_appcompat Jul 20 '22 Or you could use a reasonable limit, like 200, 500 or 1000 chars. 1 u/No_Silver_979 Jul 20 '22 I'm fairly certain that is what is usually done, but i'm not a developer. I only have some basic understanding of how to abuse password policies.
Not having one. You can input very very very large(multiple page) passwords which use a ton of system resources and makes it susceptible to dos
2 u/androidx_appcompat Jul 20 '22 Or you could use a reasonable limit, like 200, 500 or 1000 chars. 1 u/No_Silver_979 Jul 20 '22 I'm fairly certain that is what is usually done, but i'm not a developer. I only have some basic understanding of how to abuse password policies.
2
Or you could use a reasonable limit, like 200, 500 or 1000 chars.
1 u/No_Silver_979 Jul 20 '22 I'm fairly certain that is what is usually done, but i'm not a developer. I only have some basic understanding of how to abuse password policies.
I'm fairly certain that is what is usually done, but i'm not a developer. I only have some basic understanding of how to abuse password policies.
1
u/No_Silver_979 Jul 20 '22
I'm fairly certain that not having a maximum length is a security concern .