Nice. Software developer, gamer, occasionally 3d printing, coffee lover.

  • 1 Post
  • 164 Comments
Joined 2 years ago
cake
Cake day: July 1st, 2023

help-circle













  • Is the maximum 24 characters because their database column is a VARCHAR(24)? That’s one of the first questions that I thought of. Sure, it doesn’t guarantee plaintext, but it’s a indicator that it may be stored plaintext, considering hashing doesn’t care about length. Or at the very least whoever has had eyes on this code doesn’t know shit about security, which makes me less confident in the product as a whole.

    The only reason I can think of to have a maximum would be to save on bandwidth and CPU cycles, and even then 24 characters is ridiculously stingy when the difference would be negligible.