Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Unfortunately these asinine password requirements occur quite often. It's basically an indication that the site itself has poor security, and they're requiring a strong password to mitigate that risk. Also, if they are storing the password in plain-text, then it doesn't really matter how many fucking special characters your users have in their passwords :)

Also, users will just write down the password.



Writing down passwords isn't necessarily bad [1].

[1] https://www.schneier.com/blog/archives/2005/06/write_down_yo...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: