= 27d567bc2d48d9f40e9ccc20ea370b15)
dreeves comments on Anti-akrasia tool: like stickK.com for data nerds - Less Wrong
You are viewing a comment permalink. View the original post to see all comments and the full post content.
= 783df68a0f980790206b9ea87794c5b6)
Loading…= b715d02e85f7b3b4ae65ca3d3e450868)
Subscribe to RSS Feed
Powered by Reddit
= f037147d6e6c911a85753b9abdedda8d)
You are viewing a comment permalink. View the original post to see all comments and the full post content.
Comments (88)
When signing up, I was told the password I tried to use was too long (I have unique, randomly generated, passwords for each site I use). so I generated a < 20 chars password instead - however, password length limits around this size suggest that the site might be storing the passwords as plain text, rather than only storing a salted hash of the password.
So I was wondering, if that's the case here?
That's stupid of us to limit password size -- especially after all the "correct horse battery staple" discussion! [ http://xkcd.com/936 ]
But we're using the Devise module in Rails and definitely not storing in plaintext or anything too idiotic. Definitely need to change whatever stupid Devise default limits password length though. Thanks for pointing it out!