敗' OR 1=1 -- is a fine username.
At Hacker News, turdnagel writes about one astonishing example of incompetence.
My favorite dumb password experience involves EZPass, a system for paying tolls without cash, in New York.
I signed up for EZPass using a relatively “long” password (20 chars). I then received a letter in the mail about a toll I had to pay, even though I’d had the EZPass at the the time. But, the letter said, I could pay the toll by logging in to their site and using my EZpass credentials. Didn’t use OAuth but I figured it would be OK. I input my username and password using my password manager but it didn’t work. Pretty strange, as I was able to log in to the “main” EZpass site using those same credentials. I tried logging in on the payment site again to no avail. Finally I realized that my password was being truncated by the password input field itself.
The solution was to inspect the page and change the maxlen attribute of the password field.
There are sites that block password managers! One site has you send three characters of your old password when picking a new one. American Express is apparently still on 8-character case-insentive alphanumeric passwords, which at this point suggests you might go to a public library to read about the security defects of its systems, in printed books written by people who have been dead for decades.
@sciencing_bi was a well-read Science Twitter account, a queer Native American professor with a unique perspective on science and university life. They reportedly caught coronavirus and and died of Covid, drawing tributes from online admirers, some of them prominent academics. But it was only the final straw in a haybale of suspicion for people who […]
John Boyne is famous as the author of the holocaust fable The Boy In The Striped Pyjamas, but his latest work is A Traveler at the Gates of Wisdom, a generation-spanning history mystery in the vein of Cloud Atlas. In one scene, a recipe for red dye is described: “The dyes that I used in […]
Kevin McCarthy accidentally calls Louie Gohmert "Congressman COVID" pic.twitter.com/UcQcvHtEU9 — The Recount (@therecount) July 29, 2020 In this footage, house minority leader Kevin McCarthy calls his GOP colleague Louie Gohmert, freshly diagnosed with the virus, “Congressman COVID.” Harsh, but true.
If you’re a photographer, videographer, or graphic designer, you’ve got a lot of competition charging up behind you. Because while you’ve been trained as a content creator, the task of snapping brilliant images, capturing well-composed video, and posting effective social media is now part of literally everyone’s skill set. For years, Adobe and their ubiquitous […]
After years of hearing a steady drumbeat about the necessity of surfing the web under the protection of a VPN, even the most technophobic among us are starting to come around. But even knowing the dangers one can face from cybercrooks phishing for information from unsuspecting victims online, those last holdouts still have some fears. […]
You may not realize it, but some of the biggest films in movie history have been edited using the same tools some of you use to cut your video of vacationing at Disney World. Giant movies from Oscar favorites The Social Network and Gone Girl to blockbusters like Avatar, Deadpool, and last year’s Terminator: Dark […]