Last week, I tried to register for a service and was really surprised by a password limit of 16 characters. Why on earth yould you impose such strict limits? Never heard of correct horse battery staple?

        • primrosepathspeedrun@lemmy.world
          5·
          3 months ago

          OOPS we think this password is too long for you to remember, try again! and change it again in a month. your best buy account that we forced you create and are going to have a data breach on in about fifteen minutes is VERY IMPORTANT AND MUST BE SECURE

      • pixelscript@lemm.eeEnglish
        6·
        3 months ago

        I just reset my password with Southwest Airlines today. They had both the stupid 16 character limit and the stupid list of permitted special characters. But they also had the perplexing criterion that the first character of the password specifically couldn’t be one of those permitted special characters.

        Literally why.

          • pixelscript@lemm.eeEnglish
            1·
            3 months ago

            I’m not saying it was a soft rule where the form refused to validate my input. It was an actual, fully-described rule in the bulleted list among the other rules. For whatever reason they specifically went out of their way to enforce it. And I cannot fathom why they would.

            • subignition@fedia.io
              1·
              3 months ago

              I understood what you meant, it doesn’t change my answer though

              The back-end environment could have at least a few ways to screw things up if, for example, they were passing the password thru a shell script to hash it and had poor sanitization of the input

              !, #, and $ can be particular troublemakers at the start of a string, there’s probably more I’m not aware of too.