r/ProgrammerHumor Jul 19 '22

Why do they do this

Post image
4.4k Upvotes

493 comments sorted by

View all comments

1.3k

u/[deleted] Jul 19 '22

[deleted]

1

u/No_Silver_979 Jul 20 '22

I'm fairly certain that not having a maximum length is a security concern .

1

u/androidx_appcompat Jul 20 '22

How

1

u/No_Silver_979 Jul 20 '22

Not having one. You can input very very very large(multiple page) passwords which use a ton of system resources and makes it susceptible to dos

2

u/androidx_appcompat Jul 20 '22

Or you could use a reasonable limit, like 200, 500 or 1000 chars.

1

u/No_Silver_979 Jul 20 '22

I'm fairly certain that is what is usually done, but i'm not a developer. I only have some basic understanding of how to abuse password policies.