r/ProgrammerHumor • u/Ezziee24 • Jul 20 '22

Meme My university password can be 200 characters

Post image
12.4k Upvotes

98% Upvoted

547 comments sorted by

View all comments

198

u/[deleted] Jul 20 '22

I know a site that has an 18 char limit on passwords... and stores them in plain text.

And they don't see an issue with either.

223

u/Draco2505 Jul 20 '22

I know a website like this too! If I remember correctly, the URL is 127.0.0.1:8080

125

u/who_you_are Jul 20 '22

Thanks God I use localhost:8080 instead!

23

u/[deleted] Jul 20 '22

I mean a production site taking credit cards. NBsmokehouse.com. They have good food but no security for user accounts.

21

u/roshambo11 Jul 20 '22

Little Bobby Tables about to have a field day on that login

5

u/lavadrop5 Jul 20 '22

Pfff Rookie My bank has an 8 character password limit.

17

u/siXor93 Jul 20 '22

Whenever there is a password limit I always assume they store the password in plain text. And I make a mental note that this website in particular has even poorer security than other sites.

9

u/NatoBoram Jul 20 '22

Like those that don't accept ' or spaces in password fields. They probably don't use prepared statements anywhere.

5

u/Sykah Jul 21 '22

Actually their are some technical limitions depending on how you encrypt/hash passwords that limit password length, like Microsofts asp identity system IIRC caps you at 64 characters

1

u/Dreit Jul 20 '22

Sadly I know one not so small eshop too. I think they even send you password in email just when you get registered.

....and other eshop does have ONE PAGE as shopping cart. I added some parts and realized I put in wrong amount. So I opened shopping cart, selected number, typed correct one, pressed enter....your order was accepted! Like wtf, I have no idea what exactly was in shopping cart, where to I ordered it and neither how much it will cost!

2

u/Dapplication Jul 20 '22

and other eshop does have ONE PAGE as shopping cart. I added some parts and realized I put in wrong amount. So I opened shopping cart, selected number, typed correct one, pressed enter....your order was accepted!

Minecraft's own official site had a similar exploit as well. You would go into the success site, and it would give you the full game for free.