Wow that’s a big oops
Comment on Please pick a password starting with ad and ending with min
Wogi@lemmy.world 2 months agoA few years ago my ISP pushed an update to my router that changed the password requirements, invalidating my passwords. Because I couldn’t enter the old password I also couldn’t change the password. I had to do a factory reset.
Eiri@lemmy.world 2 months ago
Glitterbomb@lemmy.world 2 months ago
ISP worker here. Our chosen routers default to an 8 digit password, the first 4 are the last 4 of the mac in hex, which anyone can easily see being broadcast by the wifi network. The last 4 are a part of a unique serial number, but its just 0-9. Ultimately, if you try to brute force this default password, you need 10000 tries. It takes a regular GPU 2 minutes with hashcat. It baffles my mind that companies think this is OK.
JackbyDev@programming.dev 2 months ago
Feels odd to check the password requirements on the enter password screen in addition to the new password screen.
silasmariner@programming.dev 2 months ago
Might be checking the old password on the new password screen. Easy programming mistake to make I guess? Apply the same validation to all 3 password fields…
JackbyDev@programming.dev 2 months ago
Ahhh, good catch! You are probably a master of code reviews and QA!