• MinnesotaGoddam@lemmy.world
    link
    fedilink
    English
    arrow-up
    12
    ·
    4 days ago

    i mean the programming has to suck but i like places that let you use emoji in your password

    like who really is going to make their password “👉password👈”
    or “🧙”. it’s obviously a fake wizard, got no beard.

    • Cethin@lemmy.zip
      link
      fedilink
      English
      arrow-up
      15
      ·
      4 days ago

      It probably isn’t an issue if you’re doing things properly. Your hashing algorithm shouldn’t care if the character is latin, Chinese, Arabic, or emoji. It’s just a number at the end of the day.

      • lad@programming.dev
        link
        fedilink
        English
        arrow-up
        12
        ·
        4 days ago

        It shouldn’t, but you will get issues of how to convert to number.

        I made a password protected zip on my Android phone with a few non-ASCII characters, and the password was not accepted on PC. I am 99% sure they botched the encoding, like using UTF-32 instead of UTF-8 or something

      • anton@lemmy.blahaj.zone
        link
        fedilink
        arrow-up
        4
        arrow-down
        1
        ·
        3 days ago

        But you should normalize the unicode before hashing, otherwise a user having the single letter ä in their password, can’t log in when the ä gets built out of a and ̈on their current device or the other way around.