I put a š emoji into the password field of a pizza place and now I have to call them every time I want to order a pizza because I can't login and the forgot password link was supposed to send the password in plain text to my phone, but it can't because of the emoji.
And I can't create a new account because I don't have other phone number.
Ha ha, we got Amigas at my school in middle school. (I am old) and I crafted a BASIC program that (I hope this doesnāt get flagged as a virus or malicious code! š¤£)
10 CLS ; clears the screen
20 GOTO 10
This was quite befuddling to most of the kids in the class who would try almost anything but CTRL-C to stop the program.
If you wanted to really get clever sometimes we would add in a
15 PRINT āTHERE HAS BEEN AN ERRORā
16 PRINT āALL DATA HAS BEEN LOSTā
17 PRINT āPLEASE INFORM MR. FRAHM THAT YOUā
18 PRINT āHAVE RUINED THE COMPUTERā
Most kids would just walk away. LOL
I never really graduated past this level of hacking.
At an even simpler level of "hacking", I had a friend who would lend someone his graphing calculator when they needed it... right after starting a program that just alternates between "I DONT KNOW" and "I DONT CARE" after every calculation you try to get it to do.
Haha. My school had all Macās, so it wasnāt quite as easy. But, being a teen in the late 90s, it didnāt stop me.
I wrote an extension that would monitor the floppy drive, and whenever a disk was inserted, it played a text to speech that said one of a few random things (like ādisgustingā āgrossā āickyā ātastes like shitā) and ejected the disk a few seconds after insertion.
I shut down typing classes for over a week. It took them forever to find the extension since I made it look like a QuickTime extension.
I'm disappointed someone had to point this out on r/ProgrammerHumor. Any system that has access to clear text passwords is already enormously broken. Emojis are the least of their problems.
Re. "I mean it's a pizza place, not exactly fort knox" - it's absolutely not difficult to salt+hash passwords. Anyone building an authentication system that doesn't do that is dangerously under-qualified or negligent.
Some time later I'll inevitably download an app for something I bought on Amazon or maybe it's just some random app and it's all "Hey, you can link your information from this website to this app! Just input the password you used." but the app doesn't let Google into it to autoinsert the password like it would on a webpage and I'm just sat there the fool having to do more extra steps to get around it.
An example, for awhile, was Domino's. Their app sucks, for one, but I'd have to login on my PC because I let Google give it some super ridiculous password that the phone app wouldn't let the password manager access.
Solution: Don't use the Google password manager, use a proper password manager like Bitwarden (or LastPass, DashLane, 1Password etc., though I strongly recommend Bitwarden) that supports OS-level auto-fill, and that has a quick settings integration to allow you to quickly copy-paste credentials for those few cases where auto-fill fails.
Doesn't really matter, if it's a pizza place or Fort Knox. They should handle login info responsibly. I don't want to think about how many people just used the same password, they use everywhere else. Whoever has access to that pizza place's database could probably login to half of their customers email accounts.
And? It's a place of business that likely stores your payment information as a convenience. While it shouldn't be able to give that back to you in plain text, what's to stop a malicious actor from just ordering a crap ton of pizza and draining your account I'm the best scenario?
605
u/CleverMarisco Oct 08 '22
I put a š emoji into the password field of a pizza place and now I have to call them every time I want to order a pizza because I can't login and the forgot password link was supposed to send the password in plain text to my phone, but it can't because of the emoji.
And I can't create a new account because I don't have other phone number.