Discussion
Loading...

Discussion

  • About
  • Code of conduct
  • Privacy
  • About Bonfire
Aral Balkan
@aral@mastodon.ar.al  ·  activity timestamp 4 days ago

“Enterprise-level developers” working on mission critical banking software don’t make people have to open up developer tools to see the regular expression error on a registration form challenge 2026.

It’s not rocket science, folks.

*smdh*

#capitalism #mainstream #mediocrity

Screenshot of the registration page for Bank of Ireland. The form has no errors and fails silently. If you open up developer tools, two “Pattern attribute value <long regular expression>: invalid character in character class” errors tell a different story.
Screenshot of the registration page for Bank of Ireland. The form has no errors and fails silently. If you open up developer tools, two “Pattern attribute value <long regular expression>: invalid character in character class” errors tell a different story.
Screenshot of the registration page for Bank of Ireland. The form has no errors and fails silently. If you open up developer tools, two “Pattern attribute value <long regular expression>: invalid character in character class” errors tell a different story.
  • Copy link
  • Flag this post
  • Block
CynAq🤘
@CynAq@beige.party replied  ·  activity timestamp 4 days ago

@aral holy f that url! I’d be having an emotional breakdown between having to open a bank account and being sure someone was stealing my identity.

  • Copy link
  • Flag this comment
  • Block
JKB
@jkb@gotosocial.jkbockstael.be replied  ·  activity timestamp 4 days ago

@aral Also: how do you expect people to not get phished when your production stuff uses domains that look like that?

  • Copy link
  • Flag this comment
  • Block
Aral Balkan
@aral@mastodon.ar.al replied  ·  activity timestamp 4 days ago

If you’re trying to register for a Bank of Ireland account and the form fails silently, don’t worry, it’s simple to find out what happened and fix it.

1. Open up developer tools on your browser
2. Copy the failed regular expression from the console
3. Put it, and your generated password into Regexr (https://regexr.com)

And voila, as you can see the problem with mine* was that it hit the 16 character limit which was, to keep things exciting, not mentioned on the page.

Simples.

What muppets!

* Don’t worry, it’s a different one now.

#capitalism #mainstream #mediocrity #BankOfIreland #banks #design #web #dev #ireland

Screenshot of me debugging why the password my password manager generated was being silently rejected by Bank of Ireland’s registration form.
Screenshot of me debugging why the password my password manager generated was being silently rejected by Bank of Ireland’s registration form.
Screenshot of me debugging why the password my password manager generated was being silently rejected by Bank of Ireland’s registration form.
  • Copy link
  • Flag this comment
  • Block
Yrjänä Rankka 🌻
@ghard@mastodon.social replied  ·  activity timestamp 4 days ago

@aral but… but… enterprise-quality software built using methods and processes following best industrial practise!

  • Copy link
  • Flag this comment
  • Block
Aral Balkan
@aral@mastodon.ar.al replied  ·  activity timestamp 4 days ago

@ghard We abstracted the abstraction twice over just to be sure.

  • Copy link
  • Flag this comment
  • Block
Kim Spence-Jones 🇬🇧😷
@KimSJ@mastodon.social replied  ·  activity timestamp 4 days ago

@aral
Dumb rules for passwords really wind me up. Why should I *have* to include a number, for example? That just reduces the search space for any attacker. And then there are sites that prevent the use of certain special characters, again for no good reason (apart from the bad design of their back end, I suppose).

Secret validation fails just compound the problem.

  • Copy link
  • Flag this comment
  • Block
iwein
@iwein@mas.to replied  ·  activity timestamp 4 days ago

@aral having a nice and concise password is essential for banking I guess 🤪

  • Copy link
  • Flag this comment
  • Block
Willow :bhjflag_bisexual::anarchy_punk_demiboy:
@witix@mk.absturztau.be replied  ·  activity timestamp 4 days ago

@aral@mastodon.ar.al WHY in the fuck's name would you want a 16 character limit on a bank password

Why do banks consistently have worse security than your average website

  • Copy link
  • Flag this comment
  • Block
Malcontent Creator :grr:
@geist@eldritch.cafe replied  ·  activity timestamp 4 days ago

@aral sanitisation in the front end, ofc

  • Copy link
  • Flag this comment
  • Block
GezThePez
@GezThePez@mastodon.scot replied  ·  activity timestamp 4 days ago

@aral technology departments across banks struggle to define the simplest of business rules. Who knows what’s happening with complex processes

  • Copy link
  • Flag this comment
  • Block
Aral Balkan
@aral@mastodon.ar.al replied  ·  activity timestamp 4 days ago

Me: I need to reluctantly do some adulting.

Also me: Ends up debugging some bank’s stupid web site.

🤷‍♂️

  • Copy link
  • Flag this comment
  • Block
tom jennings
@tomjennings@tldr.nettime.org replied  ·  activity timestamp 4 days ago

@aral

Mine once had a 21 character limit on the web, but a 20 character limit mobile web, and the error was "wrong password".

Does anyone test anything?

  • Copy link
  • Flag this comment
  • Block
Malak1999
@Malak1999@mastodon.social replied  ·  activity timestamp 4 days ago

@aral Please share my post, my dear

  • Copy link
  • Flag this comment
  • Block
GezThePez
@GezThePez@mastodon.scot replied  ·  activity timestamp 4 days ago

@aral the browser console is a language I don’t speak.

  • Copy link
  • Flag this comment
  • Block
Aral Balkan
@aral@mastodon.ar.al replied  ·  activity timestamp 4 days ago

@GezThePez How do you manage everyday things like banking without it? :P

  • Copy link
  • Flag this comment
  • Block
GezThePez
@GezThePez@mastodon.scot replied  ·  activity timestamp 4 days ago

@aral the computer is in charge

  • Copy link
  • Flag this comment
  • Block
Log in

Bonfire social

Bonfire social: About · Code of conduct · Privacy ·
Bonfire social · 1.0.0-rc.3.6 no JS en
Automatic federation enabled
  • Explore
  • About
  • Code of Conduct
Home
Login