Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!news.swapon.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: Sylvia Else <sylvia@not.at.this.address>
Newsgroups: comp.misc
Subject: Re: Ebay hacked
Date: Sun, 25 May 2014 19:36:20 +1000
Lines: 20
Message-ID: <budrskFf0vtU2@mid.individual.net>
References: <bu5nskFnom7U1@mid.individual.net> <slrnlns7m5.scb.g.kreme@amelia.local> <vg3oayn5gh3.fsf@coffee.modeemi.fi> <llqipl$59h$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net 5P0D0Tu6x64gD08xXMZMCwCPy3QTsVnAq7oSJeGcisRb5sYjnJ
Cancel-Lock: sha1:nSAJJfOhBPSEHrsOSq597t2UjCU=
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.5.0
In-Reply-To: <llqipl$59h$1@dont-email.me>
Xref: csiph.com comp.misc:3136

On 25/05/2014 2:53 AM, Rich wrote:

>
>    "Spaces and certain symbols (< >[ ]//) are not allowed in password."
>
> A properly designed password storage (using a hashing function such as
> bcrypt or scrypt) does not care what symbols are in the password.
>
> Caring about specific symbols in the password implies they are not
> following proper password storage models.
>

I wonder where the restriction is enforced - both on the client and at 
the server, or just in the client? How many here would be surprised if 
it were the latter?

Sylvia.