In password security, the longer the better. With a password manager, using more than 24 characters is simple. Unless, of course, the secure password is not accepted due to its length. (In this case, through STOVE.)

Possibly indicating cleartext storage of a limited field (which is an absolute no-go), or suboptimal or lacking security practices.

  • troed@fedia.io
    link
    fedilink
    arrow-up
    2
    ·
    1 day ago

    a limit of 255 character. Why not 256? Why such a weird number in general?

    255 chars + ‘\0’ = 256

    Not weird at all.

    • Undaunted@feddit.org
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 day ago

      I see your point, but we have Java backends and strings there are not null terminated. Also I’m very sure that those would never be the reason for our Postgres server to run out of storage so I don’t get it why not make it more user friendly. We’re not implenting an embedded system where every byte of storage counts.

      • troed@fedia.io
        link
        fedilink
        arrow-up
        1
        ·
        1 day ago

        Agree, I was just commenting on why 255 in itself isn’t “weird”. I find myself doing comparisons of the “value == variable” type even in languages where you cannot assign by mistake. Some of us old farts code from muscle memory … :)