Amazon password flaw

SnoopZ · 30-01-2011, 20:13

You may wish to check and change your Amazon password as it seems they were using an old style crypt which made upper case,lower case and anything longer than 8 characters in your password to be ignored, so if your password was :- 'paSSworD1234' you could actually use 'password' to access your account!

Read on..... http://www.neowin.net/news/amazon-password-flaw

I have just confirmed this by adding 3 digits to my password and it still allowed me to sign in!!! time to change my password!

---------- Post added at 20:13 ---------- Previous post was at 18:40 ----------

Has anyone else checked their password as 2 other people i know had to change theirs as it failed the log in test?

**Hugh** · 30-01-2011, 20:17

I checked mine - if I added anything to the end (it is already eight characters), it let me log in.

SnoopZ · 30-01-2011, 20:21

Quote:

Originally Posted by Hugh

I checked mine - if I added anything to the end (it is already eight characters), it let me log in.

If you had any upper case in the password it would be ignored too.

30-01-2011, 21:08

I got a 9 charector password upper and lower if I add anything computer says no it also says no if I drop the 9th charector

---------- Post added at 21:08 ---------- Previous post was at 21:08 ----------

also if I change upper to lower case computer says no

SnoopZ · 30-01-2011, 21:10

How old is the account when you set it up? I think account that are maybe 5 years old maybe ok.

**Maggy** · 30-01-2011, 21:15

Mine seems to be OK and that's more than 5 years old.

MadGamer · 30-01-2011, 21:43

I've changed mine, just in case

Mick Fisher · 30-01-2011, 21:53

Quote:

Originally Posted by MadGamer

I've changed mine, just in case

Same as me..

Aragorn · 30-01-2011, 22:20

Mine was flawed as well - changed now.
Good spot.

Hope the security guy got a good kicking.

toonlight · 30-01-2011, 22:52

Quote:

Originally Posted by SnoopZ

You may wish to check and change your Amazon password as it seems they were using an old style crypt which made upper case,lower case and anything longer than 8 characters in your password to be ignored, so if your password was :- 'paSSworD1234' you could actually use 'password' to access your account!

Read on..... http://www.neowin.net/news/amazon-password-flaw

I have just confirmed this by adding 3 digits to my password and it still allowed me to sign in!!! time to change my password!

---------- Post added at 20:13 ---------- Previous post was at 18:40 ----------

Has anyone else checked their password as 2 other people i know had to change theirs as it failed the log in test?

Same here account is over 5 years old, the problem not a problem for me. Here

for all the party animals out there.

...

toon

30-01-2011, 23:33

Quote:

Originally Posted by SnoopZ

How old is the account when you set it up? I think account that are maybe 5 years old maybe ok.

pass lol