AOL, that paragon of security

[bascule]

Apparently, AOL has a 16 character password field which ignores the last 8 characters you enter:

http://blog.washingtonpost.com/secur...l?nav=rss_blog

BRILLIANT!

[TheCotMan]

Re: AOL, that paragon of security

Apparently, AOL has a 16 character password field which ignores the last 8 characters you enter:

http://blog.washingtonpost.com/secur...l?nav=rss_blog

BRILLIANT!

Well, they have tried to position themselves as competition with Microsoft, and MS had that backwards compatability for NT LANMan and their SMB auth by breaking a password into 2 parts for processing them separately with case insensitivity for bonus points.

Maybe AOL is trying to outdo Microsoft.

(heh heh)

[converge]

Re: AOL, that paragon of security

vnc auth anyone? That's ok.. I'm sure its statistically difficult to crack 8 character passwords with mainframe quality gaming consoles, open wireless nodes, and a plague of broadband connectivity that would make any accoustic coupler squirt a drop...

[theprez98]

Re: AOL, that paragon of security

Best quote:

"Truncating the password at eight characters is a big deal, and there's no excuse for any company in today's world to be doing that," Schneier said. "Especially because AOL has...shall we say, some less sophisticated users.

Stating the obvious, but tends to make up for his sillier comments last week.