[Cryptography] How secure are hashed passwords?

Dave Horsfall dave at horsfall.org
Thu May 22 14:45:12 EDT 2014


On Thu, 22 May 2014, James Cloos wrote:

> The password field on the login page accepts up to 64 characters.

I've seen web fields about a screen-width wide, but won't accept any more 
than "x" characters (where "x" of course is the unknown quantity).

Some alleged web-designers really need to be taken out the back and shot.

> But 31 seems not to work.  It accepts it as a new password, but won't 
> let one log in with it....

I've seen pages that don't accept phone numbers in the recognised 
international format e.g. +61 2 43xxyyyy. 

They whinge about plus signs and spaces etc being invalid...

+ = international country code coming up.
61 = Australia and regions.
2 = New South Wales.
43 = Gosford exchange.
xx = locality.
yyyy = the termination.

There used to be a pattern to mobile numbers (what others call 
cell-phones) but not any more; you can easily end up talking to tech 
support in the Phillipines (but at least it was on *their* sixpence).

ObCrypto: Can you really trust how your telephone calls are routed?

Blimey, but it's just a Simple Matter Of Programming; computers are meant 
to serve us, not the other way around.

-- Dave


More information about the cryptography mailing list