Comment

Comment on NIST proposes barring some of the most nonsensical password rules

catloaf@lemm.ee ⁨1⁩ ⁨month⁩ ago

I hate that anyone has to be told not to truncate passwords. Like even if you haven’t had any training at all, you’d have to be advanced stupid to even come up with that idea in the first place.

source

Sort:hotnew top

Amanduh@lemm.ee ⁨1⁩ ⁨month⁩ ago
Can you elaborate further? Why would someone want to truncate passwords to begin with?

source
- essteeyou@lemmy.world ⁨1⁩ ⁨month⁩ ago
  To save a few megabytes of text in a database somewhere. Likely the same database that gets hacked.
  
  source
  - frezik@midwest.social ⁨1⁩ ⁨month⁩ ago
    Lots of older databases had fixed length fields, and you had to pad it if it was smaller. VARCHAR is a relatively new thing. So it’s not just saving space, but that old databases tended to force the issue.
    
    source