Comment by memco | Hacker News Reader

Comment by memco | Hacker News Reader

Parent Full thread

I've also had fun experiences where the "special characters" differ in the description than in the implementation in a few ways.

Once I had a password accepted with non-alpha numeric characters which were considered invalid as input on the login screen and so even though my password was correct it would not let me log in because it was validated with different logic after creation.

Another issue I've seen is that the password was required to have only a certain subset of non-alphanumeric characters, but it did not explain or validate this client side so I had a password for which all the boxes turned green, but was still invalid.

In both cases only trial and error worked to find a valid password.

I spent half a year being charged monthly by Microsoft because Google considers my email address the same whether or not it has a period in it but Microsoft had somehow split my account into two based on that difference.

I'm missing something, why would they charge you monthly for that?

Extra user fee on some kind of SAAS?

Xbox Live Gold. I'd call, give them my account details, and the rep would tell me it was canceled. Three months later, another bill. Called my bank and had my card replaced, three months later somehow again another bill on my new card. After that I figured out what was going on and managed to cancel the account. I was a teenager at the time.

that's.. really on you I think, and not at all similar to one site having differing validation rules in different places for the same data. What gmail does there isn't some kind of standard, it's a unique special feature google does. You don't want other sites getting clever about this sort of thing, because if the rules change much worse things will happen.

Now, sites that treat email addresses as case sensitive - those are evil.

For a while, Discord had few password restrictions so 5 characters were fine. Then they changed their app to only allow 6+ character passwords.

Reply on news.ycombinator.com