This post did not contain any content.

[wafflesies@infosec.exchange]

This post did not contain any content.

[i@declin.eu]

@wafflesies bank probably got rid of storing everything (including the hashes) in EBCDIC/COBOL and the internet is making fun of them

[wafflesies@infosec.exchange]

@i apparently what happened was they were storing passwords in plaintext and fucked up during a database migration so when you entered your password they automatically converted it to upper case before hashing it

[ichinin@infosec.exchange]

@wafflesies Is this real?

If so, the only opportunity being opened by HSBCis for people brute forcing passwords.