|
1. The lounge is for the CodeProject community to discuss things of interest to the community, and as a place for the whole community to participate. It is, first and foremost, a respectful meeting and discussion area for those wishing to discuss the life of a Software developer.
The #1 rule is: Be respectful of others, of the site, and of the community as a whole.
2. Technical discussions are welcome, but if you need specific programming question answered please use Quick Answers[^], or to discussion your programming problem in depth use the programming forums[^]. We encourage technical discussion, but this is a general discussion forum, not a programming Q&A forum. Posts will be moved or deleted if they fit better elsewhere.
3. No sys-admin, networking, "how do I setup XYZ" questions. For those use the SysAdmin[^] or Hardware and Devices[^] forums.
4. No politics (including enviro-politics[^]), no sex, no religion. This is a community for software development. There are plenty of other sites that are far more appropriate for these discussions.
5. Nothing Not Safe For Work, nothing you would not want your wife/husband, your girlfriend/boyfriend, your mother or your kid sister seeing on your screen.
6. Any personal attacks, any spam, any advertising, any trolling, or any abuse of the rules will result in your account being removed.
7. Not everyone's first language is English. Be understanding.
Please respect the community and respect each other. We are of many cultures so remember that. Don't assume others understand you are joking, don't belittle anyone for taking offense or being thin skinned.
We are a community for software developers. Leave the egos at the door.
cheers,
Chris Maunder
The Code Project | Co-founder
Microsoft C++ MVP
modified 16-Sep-19 9:31am.
|
|
|
|
|
So yesterday I go up in the morning to find that I was getting an Authentication Error on my home Wifi. Sure enough, my password that I had for at least 2 years didn't work.
I called up my ISP which rhymes with Denture-y Fink. To make a long story short, they changed something and now they do not allow spaces to be in a password phrase. They had to reset my password because I couldn't get in with my disallowed passwords any more.
My question to you who deal with security is, do you restrict what characters can be in a password? and why?
Thanks for letting me gripe.
Brent
|
|
|
|
|
Yes, but not for security, for usability.
There is nothing worse than a user raising a support issue because their "password doesn't work". 99% of the time they just don't remember it.
Allowing a password to have spaces is more prone to user error, especially when it starts or ends with a space. So I can see why they might not want to allow spaces.
But don't go too far... one site I used recently doesn't allow special characters at all! Only letters or numbers, so this means your password cannot be as complex as you might want it to be (which is definitely a security concern).
|
|
|
|
|
I have found a several places don't allow you to end the password with a number which increases when reset Password01, becomes Password02 etc. back to the Dilbert Cartoon where you have to have squirrel noises in your password...
|
|
|
|
|
I'd agree - no spaces, but any other printable character in the Unicode set is fine (including hieroglyphs, squirrel noises, and the blood of a virgin (only available in the "Cthulhu" font).)
Only spaces and control codes are forbidden.
What annoys me more is people who decide that only "." and a single "@" is allowed in email addresses. Domains can legitimately contain "-", and mine does. Some sites just puke up at the sight of one ... which means a trip to mailinator to sign up (then change the email address and it generally works)
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
A study was done that claims a 3-word password is MORE secure than the arbitrary password rules used by 99% of the business entities out there because it's harder to use brute force them.
A space is a valid character and should not be disallowed.
".45 ACP - because shooting twice is just silly" - JSOP, 2010
-----
You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
-----
When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013
|
|
|
|
|
I had one some years ago: a friends mother had signed up with a password she could remember - her daughter's first pet, a cat called "PEPSI". And this worked for ages, until the company was bought out by one with more restrictive passwords. When she replaced the computer, she couldn't sign in to her email any more because the password was wrong. And she couldn't change it because they required her old password to set a new one and that wasn't valid under their new rules ... It took some long drawn out phone conversations to sort that one out.
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
I would be annoyed to have such a limitation. Passwords shouldn't be stored in clear text in the first place anyway, but rather salted and hashed, so I don't see any reason to limit the character set (except maybe for control characters).
"Five fruits and vegetables a day? What a joke!
Personally, after the third watermelon, I'm full."
|
|
|
|
|
My ISP gives you an IP address with a password (which YOU can change). When you point your browser to the IP address, You enter a page where you can configure many of the router parameters. (Dangerous in some hands!  ) You have full control of the router and WiFi passwords. Nice (for me, at least.) 
|
|
|
|
|
"Due to a mix up alarm made my breakfast sweeter" (9)
|
|
|
|
|
MARMELADE!
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
you won't leave me any chance to win 
In Word you can only store 2 bytes. That is why I use Writer.
|
|
|
|
|
Oh c**k.
I read it, thought "Marmalade" and posted instinctively.
I could be wrong, though?
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
I just looked, and in fact I am wrong - over to you, if you are quick!
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
|
Nah, I don't do drugs ...
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
...anymore?
"It is easy to decipher extraterrestrial signals after deciphering Javascript and VB6 themselves.", ISanti[ ^]
|
|
|
|
|
Indeedy! 
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
Well - somebody cannot spell so you are in with a chance...
|
|
|
|
|
MARMALADE ?
In Word you can only store 2 bytes. That is why I use Writer.
|
|
|
|
|
Yes please, I am quite peckish and it would make a nice brunch.
|
|
|
|
|
Yay! 
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
|
The way GRIFF wrote it is the way we Dutch write it. So I thought it was done....
Tomorrow 'kun je de borst nat maken' (Dutch saying: You have to make your chest wet -> hard times ahead) you have to find out artist and songtitle!
In Word you can only store 2 bytes. That is why I use Writer.
|
|
|
|
|
@DuncanEdwardsJones
Where's the CCC?
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
