Top all-time · #20183
Jeremy Tunnell
Personal blog · jeremytunnell.combusinessdesignsecurity
Jeremy Tunnell's personal blog at jeremytunnell.com covers business, design and security. Since 2012, 3 different Hacker News readers have linked it 12 times, most often “Schwab password policies and two factor authentication”. No feed was found, so read it on the site itself.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
The posts examine password policies, especially Charles Schwab's limits of eight case-insensitive characters with no symbols. HN readers cite them as evidence of how broken such policies were.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Jeremy Tunnell blog.
Most-linked posts?
- Schwab password policies and two factor authentication3 people · 3 mentions · first linked 2014-12-22
What Hacker News says?
I wrote this a couple years ago about Schwab's embarrasing security. Most of the issues are still there. https://jeremytunnell.com/2014/12/22/swab-password-policies-...
Comment linking /2014/12/22/swab-password-policies-and-two-factor-authentication-a-comedy-of-errors/
on “What Happens When You Send a Zero-Day to a Bank?”Submitted Schwab password policies and two factor authentication as a story · 257 points
HN discussionOne that comes to recent memory is Schwab. A few points from this ( http://www.jeremytunnell.com/posts/swab-password-policies-an... ) article from December 2014: > "Schwab.com passwords are limited to eight characters, cannot contain symbols, and are case insensitive. " > "I now know that on the backend, my secure 16 digit password got stored in the system as only the first eight characters." > "So what they do is a…
Comment linking /posts/swab-password-policies-and-two-factor-authentication-a-comedy-of-errors
on “Stop forcing arbitrary password rules”Submitted Usability lessons from neuroscience as a story · 4 points
HN discussionI'm glad they fixed this, but until relatively recently (last year), Charles Schwab had the following password requirements: * between 6 and 8 characters * alphanumeric * no symbols * case-insensitive [1] is a nice writeup of exactly how broken this was until they changed it recently. [1] - http://www.jeremytunnell.com/posts/swab-password-policies-an...
Comment linking /posts/swab-password-policies-and-two-factor-authentication-a-comedy-of-errors
on “Introduction to GPU Password Cracking: Owning the LinkedIn Password Dump”Submitted A guide to Section 1202 tax benefits for entrepreneurs as a story · 3 points
HN discussionHere's some stuff to get you started. Wrote this a little while ago: http://www.jeremytunnell.com/posts/books-on-user-experience-...
Comment linking /posts/books-on-user-experience-and-user-interface-design
on “Ask HN: Recommendations for learning and improving UX/UI skills?”Submitted Tax benefits for entrepreneurs willing to move to Puerto Rico as a story · 2 points
HN discussionhttps://jeremytunnell.com/2015/04/29/a-guide-to-section-1202...
Comment linking /2015/04/29/a-guide-to-section-1202-tax-benefits-for-entrepreneurs/
on “What Is QSB Stock and Why Does It Matter for Startups?”Or: http://www.jeremytunnell.com/posts/a-guide-to-section-1202-t...
Comment linking /posts/a-guide-to-section-1202-tax-benefits-for-entrepreneurs
on “Why doesn't someone start a company to democratize tax loopholes?”I've been meaning to write a blog post on it, but you know how it goes. Never enough time. Basically, it comes down to study + experience. But study is absolutely a necessary prerequisite; otherwise you have no criteria to decide what went wrong when something fails. I did a post here about some books that I found useful http://www.jeremytunnell.com/posts/books-on-user-experience-... I basically spent a year working…
Comment linking /posts/watchparty-tv-a-usability-analysis
on “You don't need a UX specialist”