Microsoft already had its own empty password bug for the Xbox login. A badly pla... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		josefx on Oct 6, 2018 \| parent \| context \| favorite \| on: Microsoft suspends Windows 10 update, citing data ... Microsoft already had its own empty password bug for the Xbox login. A badly placed trim call let you input a password consisting only of whitespace and it would pass as long as it had the correct length.

cududa on Oct 7, 2018 [–]

That’s nowhere near as bad as the sfrinentioned macOS big.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact