Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

One interesting observation from the comments:

On a Mac, shift with caps-lock on doesn't toggle to lower-case, so they would need to store a fourth version for this to work.

OPERATI@NGERONIMO

Overall it's a clever UX hack, though I worry they came to it by observing invalid password attempts which seems slightly outside of appropriate, although it doesn't particularly bother me in this case.



That would make all passwords essentially case-insensitive (all uppercase would work) and that would make it much easier to brute force than the inverted version.


True, and a good reason not to implement this solution.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: