Dear NAB, Why did you need to chop-off my password? If you u...

Terrence Miao - 2012-11-27 11:44:03+1100 - Updated: 2012-11-27 11:44:03+1100

Dear NAB,

Why did you need to chop-off my password?

If you used to enter more than 8 characters for your password and have not changed it in the last week, please only use the first 8 characters of your password to log in.

Read more: http://www.nab.com.au/cgi-bin/ib/301_start.pl?browser=correct

Dean Budd - 2012-11-27 11:45:35+1100

WTF?!?

Terrence Miao - 2012-11-27 11:46:27+1100

Remind me that big O's Fusion can't handle more 8 characters password.

+James Gemmell any insider reviews and comments?

Mike Nguyen - 2012-11-27 11:48:20+1100

Running out of disk space? or SOA can't take any more than 8 chars??

Bryan Murphy - 2012-11-27 11:56:24+1100

Cue the spin doctor to explain why this make NAB even more secure

Oleg Kiorsak - 2012-11-27 12:07:10+1100 - Updated: 2012-11-27 12:07:41+1100

here's my attempt at "most probabilistically likely" explanation:

- it has always been that only frist 8 chars were the significant ones

- someone accidentally discovered it and (rightfully) called it out as misleading and deceptive...

so now they don't have time and funds yet to fix it, but they are forced to just acknowledge de jure what existed de facto

?!?

Michael Poloni - 2012-11-27 12:08:34+1100

Sounds old-school ... old UNIX systems used to only support the first 8 characters as I recall. Maybe some legacy systems not yet replaced by their new IT system? Since they say it only impacts those who have a password more than a week old, maybe they've moved to a new system that finally supports more than 8 characters?

Dean Budd - 2012-11-27 12:39:20+1100

Their billion dollar Oracle stack doesn't work so they've had to go back to their old COBOL system that uses a fixed-length character array variable to store the password.