Remix.run Logo
nikanj 5 hours ago

Sometime in the 2010s when I was still with BMO, their online banking required you to have a six-digit password. No letters, let alone special characters. And no MFA of course

koakuma-chan 5 hours ago | parent [-]

BMO Investor Line still requires you to have a short password. It explicitly requires, I don't remember the exact number, like, a 6-character password. It cannot be longer. WTF.

SoftTalker 5 hours ago | parent | next [-]

Their web app is "screen scraping" a legacy mainframe CICS interface via a virtual 3270 terminal. Almost certainly the case any time you see something like a very short or very limited set of characters permitted in a password.

gnabgib 2 hours ago | parent | prev [-]

Very much doubt it, it certainly used to (4 years ago). The old system truncated your password (you used 20 chars, it dropped the last 14) so when the switch happened - suddenly your password didn't work - it was very obvious (unless you used <=6 char passwords).

The communication about the change, and the way the old system worked (without warning nor notification) left a lot to be desired.

koakuma-chan 2 hours ago | parent [-]

When you create an application to open an account it still requires you to create a fixed-length short password that you are then supposed to change or something. It was around half a year ago when I encountered this.