Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
-
Maybe their infra is fucked and they pass the password through sanitization before hashing and so passwords like <html> would either get rejected by the sanitizer or get silently changed to <html> and you wouldn't be able to login and wouldn't know why
That's my guess. I doubt a tech giant like MS is storing it in plaintext, especially since they do use oAuth property, eveb though customized. So best guess is that It's an edge case they couldn't bother to patch
Related Rants
Made my day 😂😂
This made me laugh
Registering a new account for microsoft teams:
`Your password cannot contain a space, &# characters combination, or the following characters: < >`
Are they storing the passwords in plain text? Are they not sanitizing the input? Why the fuck would they care if I put motherfucking emojis in my password? What the fuck are you doing to the passwords, Microsoft? TELL ME.
rant
microsoft
web security