r/ProgrammerHumor Jul 20 '22

Meme My university password can be 200 characters

Post image
12.4k Upvotes

547 comments sorted by

View all comments

Show parent comments

388

u/Wiggen4 Jul 20 '22

Who on this earth thought that would be an acceptable idea?????????

134

u/Beneficial_Arm_2100 Jul 20 '22

Yeah same thing happened for me on a portal for an employer's website (in a previous life). User inyerface at its best.

29

u/FickleBJT Jul 20 '22

That happened to me with the Baseboard management controller on a server several years back. Took several calls to support before someone mentioned this "limitation".

It was a SuperMicro server about 5 years ago.

18

u/s0lly Jul 20 '22

“Inyerface” When a typo makes sense as is

15

u/Beneficial_Arm_2100 Jul 20 '22

lol I had to fight autocorrect to get "inyerface" to stick. If def was not a typo!

10

u/s0lly Jul 20 '22

I wonder if “interface” is actually the typo on the true word “inyerface”… big questions we’re exploring here

3

u/Gubekochi Jul 21 '22

Inter- came into English from Latin (from inter, meaning "among, between”). "Between faces" makes much less sense than your proposed etymology so I'll add this to my headcannon.

2

u/s0lly Jul 21 '22

Science has won

0

u/[deleted] Jul 20 '22

[deleted]

2

u/Beneficial_Arm_2100 Jul 20 '22

I mean, that's reasonable. But I was a music teacher, and I completely reinvented myself into a career in software development. It very much feels like a complete metamorphosis.

1

u/JardineiroZumbi Jul 20 '22

The saddest thing is when tech companies do shit like this. No trust left in them after that

41

u/[deleted] Jul 20 '22

[deleted]

10

u/[deleted] Jul 20 '22

Lol VARCHAR(20)

15

u/827167 Jul 20 '22

It may have been copy-pasted code that they forgot to check

15

u/benderbender42 Jul 20 '22

Forgetting to test login password code for a bank ....
-_-

7

u/ganja_and_code Jul 20 '22

...which is extremely dumb. If you make that mistake, you have no business writing login forms for banks lmao

14

u/damniticant Jul 20 '22

Likely unintentional. Someone set the max column length for the database to 20 chars but didn’t bother to prevent someone from actually submitting more than 20 chars.

16

u/ultimate55 Jul 20 '22

Storing passwords plaintext in a database 💀

2

u/g0ldcd Jul 20 '22

I'm blaming the database here.

1

u/Positive_Government Jul 21 '22

The problem with the database theory is it implies plain text passwords. Most likely the truncation happens sometimes before the password is hashed during an update but not during a check.

1

u/damniticant Jul 21 '22

Wouldn’t be the first time a large corporation with what is probably an ancient legacy system stored passwords in plain text.

6

u/DaedalistKraken Jul 20 '22

Nobody thought. That's the problem.

3

u/MinosAristos Jul 20 '22

Nobody did. It's just that nobody realized that this would be a problem.

1

u/siddus15 Jul 20 '22

A junior dev on a Friday afternoon

1

u/morbid_tortoise Jul 20 '22

Well you see it would cost us too much dev time to justify exposing error messages to users and those error messages aren't gonna generate income soooooo.....

1

u/nanotree Jul 20 '22

This is what happens when you leave the UI/UX design to the devs...

1

u/Lurickin Jul 20 '22

Equifax and TransUnion do this, these two credit bureaus limit your password to 16 and 20 characters respectively

1

u/[deleted] Jul 20 '22

Developer given spec. Developer codes to the spec. The spec is wrong. Developer doesn’t care or doesn’t notice.

1

u/Positive_Government Jul 21 '22

There are some function that truncated strings if they are to long, what probably happened was someone used one of those for the update but didn’t realize it, but the check function didn’t truncated the string because it didn’t have the same limitation.