敗' OR 1=1 -- is a fine username.
At Hacker News, turdnagel writes about one astonishing example of incompetence.
My favorite dumb password experience involves EZPass, a system for paying tolls without cash, in New York.
I signed up for EZPass using a relatively “long” password (20 chars). I then received a letter in the mail about a toll I had to pay, even though I’d had the EZPass at the the time. But, the letter said, I could pay the toll by logging in to their site and using my EZpass credentials. Didn’t use OAuth but I figured it would be OK. I input my username and password using my password manager but it didn’t work. Pretty strange, as I was able to log in to the “main” EZpass site using those same credentials. I tried logging in on the payment site again to no avail. Finally I realized that my password was being truncated by the password input field itself.
The solution was to inspect the page and change the maxlen attribute of the password field.
There are sites that block password managers! One site has you send three characters of your old password when picking a new one. American Express is apparently still on 8-character case-insentive alphanumeric passwords, which at this point suggests you might go to a public library to read about the security defects of its systems, in printed books written by people who have been dead for decades.
Two men hired to break into their client’s house, menace him with machetes, tie him up, then tickle him with a broom, have been acquitted of armed break-in after hitting the wrong address. The unsuspecting victim awoke to find the men looming over his bed armed with the knives. The role play was arranged over […]
I felt sorry for this fellow, whose minor forklift mishap creates a domino effect that sends everything sprawling to the floor. But the perfect cartoon-farmer hat-stomping reaction deserves full marks for form and execution.
The Last of Us is a game about surviving in America after a pandemic. The sequel is out this summer, and as part of the marketing effort, Sony is offering a “The Last of Us Part II” skateboard with an attractive “post-pandemic distressing” effect. [via @ckunzelman] Build a deck with some real character, complete with […]
Virus quarantines and shuttered restaurants sent millions of Americans back to their homes, only to rediscover the joys of firing up an oven and cooking something special for themselves. Whether by desire, necessity, or both, many of us have certainly been spending more time in the kitchen these last few months. And we haven’t just […]
Now that the world is starting to re-emerge from its self-imposed COVID-19 quarantine, we’re all going to have to start making some adjustments to both short-term and long-term changes. And the questions… Should customers be hounded out of a store if they aren’t wearing a face mask? Are crocheted face masks safe or not? And […]
Maybe you had a piano teacher as a kid that drove you off the instrument forever. Or maybe you always wished for some serious training, but never found the time. Whether you have dreams of tossing off a Beethoven or Chopin piece at the drop of a hat or you have visions of being the […]