Gox password security

[Seal]

Anyone else think its laughable that the MtGox support websites password security is really strict and requires letters, (including a capital), numbers, non alphanumeric character and minimum length.... whereas the actual mtgox trading login only requires letters, numbers and a min length.

/minirant

[Phinnaeus Gage]

Anyone else think its laughable that the MtGox support websites password security is really strict and requires letters, (including a capital), numbers, non alphanumeric character and minimum length.... whereas the actual mtgox trading login only requires letters, numbers and a min length.

/minirant

I wonder if that's because one is salted, whereas the other is peppered.

[naypalm]

bacon and eggs dear.

[notme]

Anyone else think its laughable that the MtGox support websites password security is really strict and requires letters, (including a capital), numbers, non alphanumeric character and minimum length.... whereas the actual mtgox trading login only requires letters, numbers and a min length.

/minirant

Most of these restrictions are working against security.  The best method is to have more bits.

"It turns out that long sentences make really good passwords that are easy to remember" is much harder to crack than "8$nfK/3".

[jake262144]

I'll second Notme with this piece by xkcd:


(http://xkcd.com/936/)