all 19 comments

sorted by: hot top controversial new old
[–] 10 points 3 days ago (1 child)

Why can't they just say they invalidated my password

  • source
  • hideshow 1 child comment
  • [–] 19 points 3 days ago

    I hate this so much, happened like 5 times already to me

  • source
  • [–] 6 points 3 days ago

    Me right now with my healthcare provider. I answered all the questions wrong. On hold now for 33:32 hmb.

  • source
  • [–] 3 points 3 days ago

    If they were alive they’d organise against me and then strangle me tbh.

  • source
  • [–] 3 points 1 day ago

    Or how about:

    Please fill out your account details in order to log in.

    Me: Types mail and password.

    A verification mail has been sent to your mail. Please provide the code within 10 seconds or the code will no longer be valid.

    At that point I just ask what's the reason to have a password at all? I despise mail-forced verification, it serves no purpose other than for the initial account setup and potential password reset.

  • source
  • [–] 2 points 3 days ago

    I treat my computer with respect. The RAM sticks I have in there are all I have to retire on.

  • source
  • [–] 2 points 3 days ago (7 children)

    The slop is strong in this one

  • source
  • hideshow 7 child comments
  • [–] 4 points 2 days ago (4 children)
  • [–] 1 point 2 days ago (3 children)

    Looking at the edge of the table/desk at the cat, I’d say it is. But it might be traditional easy photoshop, fair enough.

  • source
  • parent
  • hideshow 3 child comments
  • [–] -1 points 3 days ago (2 children)

    Is this community just ai-generated memes?

  • source
  • hideshow 2 child comments
  • 11 comments in c/iiiiiiitttttttttttt@programming.dev view that post
    [–] 9 points 2 days ago (1 child)

    "we just had a breach and soft forcing users to change their credentials"

  • source
  • hideshow 1 child comment
  • [–] 13 points 2 days ago (6 children)

    IT devs who wrote oldpassword===newpassword checks should be tarred feathered hung drawn and quartered, in that order.

  • source
  • hideshow 6 child comments
  • [–] 3 points 2 days ago (3 children)

    Nah, use a password manager and stop using that garbage collection of characters you’ve used for over a decade.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 3 points 2 days ago* (2 children)

    Password managers don't protect against passwords being stored in plaintext on the server side... Which my main comment implies.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 1 day ago (1 child)

    If I had to implement a same password check, I would simply check if the new password works to authenticate the user. If it doesn't, then it's different. There's no reason or excuse to ever store plaintext passwords.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 1 day ago

    I'm no expert either but IIRC best practice is to use salting and hashing. basically together with your password is a long string of random characters generated by the site (the salt). the two are combined and put into a a cryptography hashing algorithm to give you a hash. the website only stores the salt and the hash. every time you log in you provide the password for the whole thing again and if the output hash matches the stored one then it knows your password is correct, without ever having to store it in any record.

  • source
  • parent
  • [–] 6 points 2 days ago

    (enters “4”)
    Notification: Your password has changed

  • source
  • [–] 2 points 2 days ago
    [+] 1 point 1 day ago