A Basil Plant@lemmy.world to Cybersecurity - Memes@lemmy.world · 8 months agoYour password must also not contain the following character combinations: script, select, insert, update, delete, drop, --, ', /*, */.lemmy.worldimagemessage-square56fedilinkarrow-up1340arrow-down15
arrow-up1335arrow-down1imageYour password must also not contain the following character combinations: script, select, insert, update, delete, drop, --, ', /*, */.lemmy.worldA Basil Plant@lemmy.world to Cybersecurity - Memes@lemmy.world · 8 months agomessage-square56fedilink
minus-squarezqwzzle@lemmy.calinkfedilinkEnglisharrow-up52arrow-down1·8 months agoSo they’re not hashing or salting the passwords too. Cool…
minus-squareSemi-Hemi-Demigod@kbin.sociallinkfedilinkarrow-up18arrow-down1·8 months agoThey might be doing it in the DB query, but they’re definitely not sanitized beforehand.
minus-squareCrayonRosary@lemmy.worldlinkfedilinkarrow-up1·8 months agoSanitization has nothing to do with salting and hashing.
minus-squareRednax@lemmy.worldlinkfedilinkarrow-up9·8 months agoWhich makes me want to try and insert a password of a few megabytes worth of text. Should be fine, since there is no max lenght defined, right?
minus-squarelars@lemmy.sdf.orglinkfedilinkarrow-up4·8 months agoIf there is no overwrought prohibition of something I know that at least in America that means it’s Affirmatively legal and Legislatively encouraged by the FREEE Act So give ’em hell!
So they’re not hashing or salting the passwords too. Cool…
They might be doing it in the DB query, but they’re definitely not sanitized beforehand.
Sanitization has nothing to do with salting and hashing.
Which makes me want to try and insert a password of a few megabytes worth of text. Should be fine, since there is no max lenght defined, right?
If there is no overwrought prohibition of something I know that at least in America that means it’s
So give ’em hell!