the whole world burns

AOL’s absurdly bad password system

 #

Issues apparently include:

  • Passwords truncated to the first 8 characters
  • Non-alphanumeric characters stripped
  • Stored encrypted (not hashed) in the Windows registry

And various Unix flavours have similar default behaviour?!

What the devil?

The Whole World Burns is the rephrase miniblog, containing links and other miscellaneous trifles.