Hacker News Reader

IBM legacy in action. Nobody ever got fired for buying IBM, but some of them probably should have been.

IBM? AT&T, more likely. Unix had an 8 character limit long after people knew better.

Nothing would surprise me less than banks implementing a bank user accessing the bank via the website as a Unix user on a system.

I used to use a major local bank which had (and still has) a 6 character limit on password length. For real. Also, no symbols allowed.

ING Australia [1] only supports a four-digit PIN. Seems to work fine for them; I haven't heard of anyone losing money as a result.

[1]: https://www.ing.com.au/securebanking/

4-digit PIN with probably lots of protection/detection against bruteforcing (e.g. you only get 3 tries before you're locked out, then you have to go physically verify your identity and change the PIN again) and it's a bank so naturally everything is already being monitored.