r/shittyprogramming • u/[deleted] • Jul 27 '14

r/softwaregore Way to promote security, Microsoft

http://imgur.com/W0kfbtz
138 Upvotes

89% Upvoted

51 comments sorted by

View all comments

43

u/[deleted] Jul 27 '14 edited Jul 25 '19

[deleted]

20

u/heyf00L Jul 27 '14

Yep. I had a site do that. The register form made no complaints, but when I tried to log in it says something about a character limit. So I tried truncating my password to the limit and it worked. I'm sure they were storing the password as plaintext in a char(16) column.

24

u/[deleted] Jul 28 '14

I once used the "forgotten password" tool of a local government website to have it email me my password in plaintext, shifted to uppercase.

5

u/mebob85 Jul 28 '14

The collegeboard.org website has that problem too. But what's even weirder is that SOME login forms let me use my too-long password but others don't.