1117
Passwords are insecure
(programming.dev)
Post funny things about programming here! (Or just rant about your favourite programming language.)
The worst version of this I’ve ever seen is a site that enforced a password policy on the “current password” field on the “change password” interface. I had an existing password that violated their policy (either because they changed the policy or a technician created a “temporary” password for me, I forget), and I could not change it to a proper password because my current password would get rejected.