Welcome Guest ( Log In | Register )

Outline · [ Standard ] · Linear+

Chat CIMB kena hack?

views
     
aminpro
post Dec 19 2018, 04:06 PM

Getting Started
**
Junior Member
191 posts

Joined: Aug 2010
From: Town of Eureka
» Click to show Spoiler - click again to hide... «



NLT has amended the two articles in question and added a note in the first paragraph for clarity.

https://nasilemaktech.com/cimb-did-nothing-...al-explanation/
https://nasilemaktech.com/debunking-mainstr...never-happened/


aminpro
post Dec 21 2018, 06:08 AM

Getting Started
**
Junior Member
191 posts

Joined: Aug 2010
From: Town of Eureka
QUOTE(okuribito @ Dec 21 2018, 01:38 AM)
Adoi, we have the author himself here  thumbup.gif  LOL I read your 2 articles  smile.gif

So in both articles, you imply that old passwords cannot be longer than 8 chars? That means less than 8 chars also can? That's pretty extreme ler ... no minimum length ka? And confirm nobody ever could create passwords > than 8 chars in the past?

In the first article you said "old passwords do not support or contain special characters" Then in your 2nd article you said "old password consists of letters, numbers and symbols(just not a requirement)"  Got or not?

TIA
*
The current updated FAQ from CIMB suggests that special characters were allowed in the past, just not mandatory.
The JS implementation also allows for special characters to be submitted if it was less than 8 characters.

The first article was taking the assumptions of how the old system used to work.
The second article reflects a more accurate situation due to the currently given evidence.

So far we cannot find good evidence that special characters were not allowed during the 8 character era. Everything else points to it being allowed back then.


Regarding the 8 characters thing you mentioned earlier, in the past, the characters were fixed to 8 characters maximum and minimum.
There was never > 8 characters in the past because it does not exist due to the old password policy being fixed at 8 characters.
The JS logic representing the old policy is the one that is saying "less than 8" as a criterion.

user posted image

All that said, the conclusion is that security was never compromised or hacked due to the new mechanisms for CIMB Clicks as some articles are suggesting in their clickbait headlines smile.gif

This post has been edited by aminpro: Dec 21 2018, 06:19 AM

 

Change to:
| Lo-Fi Version
0.0182sec    0.78    7 queries    GZIP Disabled
Time is now: 15th December 2025 - 04:49 PM