• (cs) in reply to @Deprecated
    @Deprecated:
    That would be a train to the Anagram Club Meeting in "port giltcox"

    No, you're thinking of a palindrome. The anagram of "Plxr itgocot cx" would be "Notlob."

  • Hortical (unregistered) in reply to Nobody
    Nobody:
    " at least one numeric character without using any numbers,"

    i ?

    In your dreams!

  • Zune-Tran (unregistered) in reply to HP PhaserJet
    HP PhaserJet:
    Maybe the weird password one was trying to make a point about how passwords are ultimately useless, as is any form of security, as nothing can be perfectly protected and power is only an illusion.

    Open yourself up to world and accept whatever it offers, whether it be joy or sorrow! Try to pick and choose and you'll get nothing at all!

    Indeed. I often open myself up to the public and accept whatever is inserted.

    Most frequently, it is sorrowful, but, you know, the joyful kind of sorrowful.

  • IV (unregistered)

    A is a numeric character when you count in hex. Given that this is a programming site, that probably should have come up sooner.

  • the beholder (unregistered) in reply to IV
    IV:
    A is a numeric character when you count in hex.
    And nobody said you couldn't use roman numerals too. So "XLII" should satisfy that condition.
  • (cs) in reply to frits
    frits:
    Nagesh:
    Has cregslist baned you already?
    When are you going to go back to baiting anti-Indian racists? I miss those days.
    Considering how overly-horrible and obvious his deliberate misspelling and grammar errors have been lately, I'm beginning to think the Nagesh account was taken over by an anti-Indian racist. What associations to Indians is he making, other than negative shit like bad spelling/grammar?

    Classic Nagesh could at least put a somewhat-decent sentence together, enough to convince some haters he was Indian, but not so much it screamed white-kid-from-suburbs-pretending-he's-Indian. Examples, from the "good old days".

    I used to hate the old Nagesh. Now I sorta miss him. sniff

  • (cs) in reply to boog
    boog:
    frits:
    Nagesh:
    Has cregslist baned you already?
    When are you going to go back to baiting anti-Indian racists? I miss those days.
    Considering how overly-horrible and obvious his deliberate misspelling and grammar errors have been lately, I'm beginning to think the Nagesh account was taken over by an anti-Indian racist. What associations to Indians is he making, other than negative shit like bad spelling/grammar?

    Classic Nagesh could at least put a somewhat-decent sentence together, enough to convince some haters he was Indian, but not so much it screamed white-kid-from-suburbs-pretending-he's-Indian. Examples, from the "good old days".

    I used to hate the old Nagesh. Now I sorta miss him. sniff

    music playing in background

    Memories...

  • Hater (unregistered)

    Admins, please Please ban boog and frits, they making this site boring

  • Zune-Tran (unregistered) in reply to Hater
    Puffer:
    Admins, please bang boog and frits (in the can), they're making this site boring.
    ZTFY
  • Bronie (unregistered)
    Emma Story:
    Worst. Movie Preview. Ever.
    Actually, I've found ERO.CABLE.30.008 being pretty entertaining. May be not your genre though, since you're girl.
  • (cs) in reply to Hater
    Hater -fake Neghesh.:
    Admins, please Please ban boog and frits, they making this site boring

    Censursheep is bad.

  • Digger (unregistered) in reply to Nagesh
    Nagesh:
    Hater:
    Admins, please Please ban boog and frits, they making this site boring

    Censursheep is bad.

    Also ban Nagesh. Those 3 are worse than censursheep.

    CAPTCHA: appellatio. No appeals for you

  • Zune-Tran (unregistered)

    F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5 F5...

    PLEASE TALK TO ME, I'M SO ALONE!!!!!!! SO BITTERLY ALONE!!!!!!

  • Anno (unregistered) in reply to Hortical
    Hortical:
    Nobody:
    " at least one numeric character without using any numbers,"

    i ?

    In your dreams!
    π?

  • (cs) in reply to boog
    boog:
    frits:
    Nagesh:
    Has cregslist baned you already?
    When are you going to go back to baiting anti-Indian racists? I miss those days.
    Considering how overly-horrible and obvious his deliberate misspelling and grammar errors have been lately, I'm beginning to think the Nagesh account was taken over by an anti-Indian racist. What associations to Indians is he making, other than negative shit like bad spelling/grammar?

    Classic Nagesh could at least put a somewhat-decent sentence together, enough to convince some haters he was Indian, but not so much it screamed white-kid-from-suburbs-pretending-he's-Indian. Examples, from the "good old days".

    I used to hate the old Nagesh. Now I sorta miss him. sniff

    Alex, I have been ouuted. Now what?

  • Zune-Tran (unregistered) in reply to Nagesh
    Nagesh:
    Alex, I have been outed. Now what?
    Now you come home with me,

    you dirty little twink. ;)

  • (cs) in reply to Hater
    Hater:
    Admins, please Please ban boog and frits, they making this site boring
    Haters gonna make some valid points.

    But before I'm banned, please do give me the chance to improve where I am lacking. Do you have any brilliant tips to make my comments as exciting and enriching as yours?

  • (cs) in reply to password: the biggest wtf
    password: the biggest wtf:
    why 14......it makes you wonder....whats so special about 14?

    It's the only even number of sides for which there are no convex deltahedra (solid geometric figures with each face an equilateral triangle). I thought everybody knew that.

  • (cs) in reply to boog
    boog:
    Hater:
    Admins, please Please ban boog and frits, they making this site boring
    Haters gonna make some valid points.

    But before I'm banned, please do give me the chance to improve where I am lacking. Do you have any brilliant tips to make my comments as exciting and enriching as yours?

    ... or coherent or funny or relevant or...

  • (cs) in reply to boog
    boog:
    Hater:
    Admins, please Please ban boog and frits, they making this site boring
    Haters gonna make some valid points.

    But before I'm banned, please do give me the chance to improve where I am lacking. Do you have any brilliant tips to make my comments as exciting and enriching as yours?

    Fer chris's sake, be litle more wity.

  • (cs) in reply to da Doctah
    da Doctah:
    password: the biggest wtf:
    why 14......it makes you wonder....whats so special about 14?

    It's the only even number of sides for which there are no convex deltahedra (solid geometric figures with each face an equilateral triangle). I thought everybody knew that.

    Lern sumthing new every day.

  • (cs) in reply to Zune-Tran
    Zune-Tran:
    Nagesh:
    Alex, I have been outed. Now what?
    Now you come home with me,

    you dirty little twink. ;)

    Ok! Plz meke post with your adress in it.

  • (cs) in reply to Nagesh
    Nagesh:
    boog:
    Hater:
    Admins, please Please ban boog and frits, they making this site boring
    Haters gonna make some valid points.

    But before I'm banned, please do give me the chance to improve where I am lacking. Do you have any brilliant tips to make my comments as exciting and enriching as yours?

    Fer chris's sake, be litle more wity.

    I was asking for my own sake; I don't care about chris.

    Also, I'm not sure what you think wit is.

  • (cs)

    Car wash? Looks to me like the pump needs a wash!

  • The Mr. T Experience (unregistered)

    Yesterday's thread was better. I don't even think most of these commenters today are nerds. I mean it's more like a bunch of loner weirdos around here. It's like I'm at a Social Distortion concert or something.

  • (cs) in reply to A Moose once bit my sister.
    A Moose once bit my sister.:
    The problem is that he's going to receive a bill for that consumption, and then have to fight them. Really they need a safety check: A 100 amp house, at 240v (both legs in NA) can't use more than 18000 kwh in a month. So the billing system should barf every time consumption hits that.

    Now, why go to all that trouble when we can auto-draw $12,804.39 from the customer's account and earn interest on it while we accuse the customer of trying to rob us? It's just so much fun to watch the customer struggle, like a fly in a web; and we get paid for it, too!

  • (cs) in reply to Le Forgeron
    Le Forgeron:
    But most important, how the hell did the wires not melt ? Did you get connected with supraconductors ?

    Think extra-fat speaker cables.

  • Hater (unregistered) in reply to boog
    boog:
    But before I'm banned, please do give me the chance to improve where I am lacking. Do you have any brilliant tips to make my comments as exciting and enriching as yours?

    Just.. just shut up.

    You had me at hallo

  • (cs)

    I dont see the problem...

    099705 - Actual Reading 100011 - Estimate 100345 - Estimate 100357 - Estimate 100014 - Actual 100231 - Estimate 100254 - Estimate

    Granted the 345 -> 357 estimate seems a bit unsual, but that is about it...

  • big picture thinker (unregistered) in reply to password: the biggest wtf
    password: the biggest wtf:
    the biggest wtf which a lot of people would miss is, why is the maximum character length for the password 14?

    shouldn't they be converting all passwords into MD5 or SHA1 at least? in which case I could type in 12343578975643 characters and still would end up with a 32 or 40 byte MD5/SHA1 hash

    so then you wonder, why do they have a maximum which seems arbitary? why not max 255 chars? I could understand that, or perhaps 64 something with a "boundary"

    why 14......it makes you wonder....whats so special about 14?

    Indeed. Imposing any size limit at all from the front-end is not technically possible. Sure you can restrict the size of the text box in the web form but that relies on enforcement by the client's browser. The client can easily greasemonkey that limit away.

    Not to mention it's possible to submit a POST request to a webserver without using a "browser". You can use any one of the abundance of HTTP classes and wrappers in various languages and/or the socket API directly to submit data of any length and containing any characters to any webserver. Therefore, your server's back-end script must be able to handle arbitrary-length submissions of arbitrary-content gracefully, and not count on the (so called) "limits" imposed by the front-end.

    The only real limit is that webservers are configured to cease processing requests after certain time and size limits, so if you make your password so huge that it encounters these webserver-imposed limits (i think 8MB is default on Apache), then the script will exit.

    Bottom line:

    (1) Websites that restrict password fields to exceptionally small values (like 14,20,etc characters) are probably coded poorly by someone who doesn't know how things work, and it's a sign to a Pen Tester that there may be other exploitable vulnerabilities.

    (2) Even if your password was the unabridged works of William Shakespeare, when it's hashed it will only be 40 characters long, so allowing long passwords does not impact database size whatsoever.

    (3) Restricting fields to something like 255 characters through the front-end is reasonable, because even though it cannot stop people from POSTing larger data (as described above), it does preclude 99.9% of ordinary users from wasting your bandwidth.

    (4) If you encounter a website that denies you from entering various "special" characters, you can be nearly certain that they are storing it as plain-text. Only a novice programmer would restrict "special" characters in order to preclude the use of control characters that could otherwise allow database injection. An experienced and security-minded programmer would utilize parametrized inputs to safeguard against injection. Not to mention that a hashed password as represented by a string, only contains numbers 0-9 and letters a-f.

    CAPTCHA: saluto. I saluto you for recognizing this.

  • Marke (unregistered)

    (nü′mer·ik ′kar·ik·tər ′set) (computer science) A character set that includes only digits and certain special characters, such as plus and minus signs and control characters.

  • (cs) in reply to Hater
    Hater:
    boog:
    But before I'm banned, please do give me the chance to improve where I am lacking. Do you have any brilliant tips to make my comments as exciting and enriching as yours?
    Just.. just shut up.
    Hmm... I'm not sure if that'll work.

    Tell you what, why don't you shut up first, and if I like what I see then I'll try it too.

  • tomhanks (unregistered) in reply to C# Guy

    "I have heard of energy companies taking out millions of pounds from a customers bank account by direct debit"

    Hah! I'd like to see them try... I can't even get $20 out of my account atm.

  • (cs)

    (Jon wrote) "This webform dares to ask a deep existential question: in which year was I?"

    I don't think it's so much existential as technical (or maybe historical). When it asks, "In what month and year were you ?", it's wanting to know the settings that you used in your most recent time-machine excursion.

  • Hater (unregistered) in reply to boog
    boog:
    Tell you what, why don't you shut up first, and if I like what I see then I'll try it too.

    That's could be just after you suck my balls. And you will like that, for sure.

  • Friedrice The great (unregistered) in reply to Nagesh No More
    Nagesh No More:
    Nagesh:
    No coments from our usual gang of boring folks - COcto, booger, frits?

    Gues they all got asigned some task activity at work or find job or something.

    feke nagesh will be here soon, smirch my good name

    // ==UserScript== // @name Nogesh // @namespace http://thedailywtf.com/nogesh // @description No more gesh // @include http://thedailywtf.com/Comments/* // ==/UserScript==

    var comments = document.getElementsByClassName("CommentContainer"); for(var i=0;i<comments.length;i++) { var comment = comments[i]; if (comment.innerHTML.toLowerCase().indexOf("nagesh") != -1) { comment.parentNode.removeChild(comment); } }

    But Nagesh has overcome so many handicaps to get where he is today!

  • (cs) in reply to Coyne
    Coyne:
    A Moose once bit my sister.:
    The problem is that he's going to receive a bill for that consumption, and then have to fight them. Really they need a safety check: A 100 amp house, at 240v (both legs in NA) can't use more than 18000 kwh in a month. So the billing system should barf every time consumption hits that.

    Now, why go to all that trouble when we can auto-draw $12,804.39 from the customer's account and earn interest on it while we accuse the customer of trying to rob us? It's just so much fun to watch the customer struggle, like a fly in a web; and we get paid for it, too!

    This is why I'm much more willing to give bank routing info to people who put money in my account than to people who take it out. There's a handful of places I still have to write checks to because they don't take online credit card payments (or charge a fee.) One of this is, sadly, the electric company.

  • kktkkr (unregistered)

    How has no one suggested using the Unicode circled numbers for numeric characters?

    (Also try: Japanese characters for one to ten, and their circled versions.)

  • grumpy (unregistered) in reply to Nobody
    Nobody:
    " at least one numeric character without using any numbers,"

    i ?

    Get real.
  • (cs) in reply to the beholder
    the beholder:
    IV:
    A is a numeric character when you count in hex.
    And nobody said you couldn't use roman numerals too. So "XLII" should satisfy that condition.
    四 is also a numeric character that isn't one of 0123456789. Really, there are all sorts of possibilities here.
  • Planar (unregistered) in reply to password: the biggest wtf
    the biggest wtf which a lot of people would miss is, why is the maximum character length for the password 14?

    That's easy: there is a buffer overflow bug in the password-handling code.

  • (cs)

    That's not a CAPTCHA; that's a wallpaper design for a child's bedroom.

  • (cs)

    I'm curious as to why a "smart" electricity meter would be using BCD to record usages. It's not relying on a gear train for display, is it?

  • Algo (unregistered)

    Password enforcement can be so annoying and sometimes results in worse passwords than I would normally do. E.g. TD-Canada Trust Bank specifies [A-Za-z0-9]{5,9} -- Seriously WTF? No underscores or spaces?

  • (cs)

    Write something about clever horse staple, link to xkcd. Get 4 or 5 comments that xkcd is not funny. Another 26 discussing the entropy of password complexity requirements. Successful troll is successful.

  • Bronie (unregistered) in reply to Planar
    Planar:
    the biggest wtf which a lot of people would miss is, why is the maximum character length for the password 14?

    That's easy: there is a buffer overflow bug in the password-handling code.

    It can be easily fixed by just truncating any password characters beyond 14.

  • (cs)
    In which month and year were you?

    Hang on, let me go get my TARDIS and check.

  • Hater (unregistered) in reply to Arancaytar
    Arancaytar:
    In which month and year were you?

    Hang on, let me go get my TARDIS and check.

    That's tarded joke

  • l33t pr0gr4mer (unregistered) in reply to password: the biggest wtf
    password: the biggest wtf:
    the biggest wtf which a lot of people would miss is, why is the maximum character length for the password 14?

    shouldn't they be converting all passwords into MD5 or SHA1 at least? in which case I could type in 12343578975643 characters and still would end up with a 32 or 40 byte MD5/SHA1 hash

    so then you wonder, why do they have a maximum which seems arbitary? why not max 255 chars? I could understand that, or perhaps 64 something with a "boundary"

    why 14......it makes you wonder....whats so special about 14?

    Well, it would be 15, but I need a null terminator...

  • u idiot (unregistered) in reply to frits
    frits:
    Nagesh:
    No coments from our usual gang of boring folks - COcto, booger, frits?

    Gues they all got asigned some task activity at work or find job or something.

    feke nagesh will be here soon, smirch my good name

    <boring> I'm given very long projects with some milestones. Therefore, for the most part, I'm self-managed (Read: Self-paced). Thanks for your concern Mr. Kukunoor! :)</boring>

    I'm actually looking for an upgrade in my daily browsing to a more intelligent community. This place is full of kooks and jerks. Any suggestions?

    Let's all prove how stupid we are by asking one of the biggest kooks on the site whether he knows any online community with fewer kooks and jerks...

Leave a comment on “Numerically Non-numeric”

Log In or post as a guest

Replying to comment #:

Log Out

« Return to Article