• skulblaka@sh.itjust.works
    link
    fedilink
    arrow-up
    0
    ·
    1 year ago

    That just means they’re forcing everyone to change their passwords but they don’t want to come out and tell you about it.

    If you’re lucky, some overzealous sysadmin is just trying to enforce regular password updates on his users, and makes them expire every once in a while.

    More likely, there was a breach of some sort that they want to keep on the hush.

    • MicrowavedTea@infosec.pub
      link
      fedilink
      arrow-up
      0
      ·
      1 year ago

      It’s also possible there’s a hidden max password size somewhere, like some fields only counting the first x characters of the password but it’s inconsistent across different forms.

      • Midnight Wolf@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 year ago

        USAA is guilty of this shit. Let’s you set a huge password. Truncates it. Doesn’t tell you about it. Error when logging in.

        I want to beat the motherfucker behind this strategy.

        E: Kagi too. I bitched out the support and I got a ‘meh, it should have told you’ response. Fix your shit.