Hacker News Reader

I don't know about Discover.com, but Discovercard.com (for credit card account access) seems to cap passwords at 8 characters, which drives me crazy. Other than someone setting a database column to 8 chars and not wanting to deal with altering the table, what good can come of limiting password size to 8 chars?

View on HN

ahh -- my bad discover.com redirects to discovercard.com.

also, I just double-checked -- I have a mix of upper and lowercase in my password -- I downcased it and submitted -- and got in -- can someone explain that? I mean you have to pretty much goto lengths to do that... it's insane

If they're storing it in plaintext, with a mysql backend - mysql doesn't care about case, by default. (At least, in my experience, this might have changed.)

Reply on news.ycombinator.com