Re: [OT] Password regex change on mybills.co.il

Amos Shapira <[email protected]>
Newsgroups gmane.linux.region.israel
Message-ID <CAF9n_WWh2=8JY0CHvZgLrAqo7esN=pn85as2NCcp1yCsu93W9A@mail.gmail.com>
One condition I see from this regex which wasn't mentioned yet is that
there should be at least two *consecutive* letters in the password.

All in all, as Steve said - this is an idiotic way to enforce such complex
requirements (and I consider myself a regex enthusiast), and they should
fix their own shit. Just send them a password you tried so they can see for
yourself that it doesn't work.
On 28 Feb 2016 6:47 a.m., "Valery Reznic" <valery_reznic-/[email protected]> wrote:

> Hi, All.
>
> It's not actually Linux-related, but more regular-expression question.
> Nevertheless ...
>
> Recently I was unable to login into site mybills.co.il
>
> Attempt to reset password also failed due to regular expression test
> failed.
>
> Mybills claims that password should be 8-10 characters long and should
> include at least two digits and Latin letters.
>
> Whatever I tried as password - I was not able to pass their regex test.
>
> After a bit of digging
> I found following in the https://www.mybills.co.il/js/Validations.js
>
>
> //var passREGEX =
> /^(?=.{8,10}$)(?=(.*[0-9]){2,})(?=(.*[a-zA-Z]){2,})(?=(.*[~!@#$%^&*()+-_=])).*/;
> var passREGEX =
> /^(?=.*[a-z])(?=.*[A-Z])(?=.*[0-9])(?=.*[~#%&=\$\-\!\?\^@])(?=.{8,})/;
>
> I tried first (commented out) regex in
>  the regex101.com and indeed password with 2 digits and 2 Latin letters
> matches
>
> I tried the second (active) one- no matches.
>
> Any idea what password should looks like to match this regex?
>
> I tried to contact mybills's support - no luck here :(
>
> Valery
>
>
>
>
>
> _______________________________________________
> Linux-il mailing list
> [email protected]
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
>

_______________________________________________
Linux-il mailing list
[email protected]
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.