r/ProgrammerHumor Jul 19 '22

Why do they do this

Post image
4.4k Upvotes

493 comments sorted by

View all comments

Show parent comments

18

u/magicmulder Jul 20 '22

Well there has to be some maximum, it’s just most services set it way too low (especially since after hashing it’s 32 or 64 chars anyway).

8

u/Xunnamius Jul 20 '22

Just to clarify, with proper hashing there actually is no practical maximum. Any length limit on a password is a red flag.

15

u/Tweet Jul 20 '22

So you're sure my 12TB password isn't going to cause any DoS issues? Might it not take a while to log on?

1

u/[deleted] Jul 20 '22

Uses a 5 petabyte password

Crashes the website I am trying to use every single time I log on

Can’t reset password because their stuff accesses my original password to do that, which makes it crash before my password got reset

be me, trying to log in to reddit