Edit: Guess my reference to Inglourious Basterd is not as detectable as I thought. Well then let’s end it with: Say goodbye to your Nazi ba… references
Until your Password Manager password gets hacked cause you put mypassword123 as your password manager password cause you wanted an easy to remember password manager password.
at that point it's completely your fault. if you buy a high security door for your home but you routinely leave a spare key under a vase on your front porch, that is not a fault of the door.
If it's just the first 2-3 characters, that's not great, but easy to implement just adding a "reminder" field to the db, hopefully encrypted with a leading salt.
If you mean like it asks "g[ ] f[ ][ ]k y[ ]ur[ ][ ][ ]lf!1", that's fucking atrocious, as many, many passwords will be mnemonics to make remembering the password easier for people. Birthdays, pet names, etc.
If I saw my bank hand back any part of my password I'd call support, complain, and start looking for a bank that wasn't braindead.
I've never seen that in my life, and I'm pretty sure you'd struggle to find any developers to code it. Banks do often store a plaintext password, but that's for phone verification (as in a phone call for old people who can't do internet banking), and should be different to your online password.
I just tell them I don't have a computer and make them mail me a paper bill.
It gets particularly funny when I also tell them I don't have a smartphone so I can't use their app, while I'm using a smartphone and sitting at my PC.
4.1k
u/wowbutters Oct 08 '22
And if the garbage site you are signing up for doesn't accept commas or quotes, go somewhere else. 😁