 banks have suffered a serious
compromise leading to the loss of 9-figure plus amounts of money yet?

~~~
syrrim
Banks normally don't actually transfer any money. There's a funny story from
the 1920s of the Bank of England pushing money across the vault floor to
indicate a transfer to France, who held an account with them. The money
doesn't actually go anywhere, it just says so on the balance sheet. If someone
"steals" 1 billion dollars by making the system think they took it, someone
will eventually notice, then they'll send somebody down to the vault to push
it back to the other side.

Bitcoin is very different: when the bitcoin blockchain says someone else has
your money, they have it. Imagine someone had heard that Ethereum had suffered
no major attacks on exchanges, but hadn't heard of the DAO attack. They must
think that Ethereum is extremely secure. Actually, Ethereum is very insecure,
but a large enough target will get special treatment. Bitcoin doesn't have the
same tendency as Ethereum (and real life) towards hard forks, so of course it
will have more attacks on it. But this doesn't imply that anyone will hard
fork when you get hacked, nor will the banks necessarily reverse the
transaction when someone guesses your password.

------
shanecoin
I would argue that this is not just banks but a number of different services.
This entire Github repository [1] and this Twitter account [2] are dedicated
to sites with dumb password rules. Passwords are not meant for humans.

Here is a link to a hackernews thread discussing the worst of the requirements
in the repository is here [3].

[1] [https://github.com/dumb-password-rules/dumb-password-
rules](https://github.com/dumb-password-rules/dumb-password-rules)

[2] [https://twitter.com/dumb_pw_rules](https://twitter.com/dumb_pw_rules)

[3]
[https://news.ycombinator.com/item?id=20890381](https://news.ycombinator.com/item?id=20890381)

~~~
pingyong
The PayPal section doesn't mention that they have a 20 character limit too. I
banks have suffered a serious 
 compromise leading to the personnel casualty of 9 - name plus amounts of money yet? 

 ~~~ 
 syrrim 
 Banks normally don't actually transmit any money. There's a funny story from 
 the 1920s of the Bank of England push money across the vault floor to 
 indicate a transfer to France, who apply an account with them. The money 
 doesn't actually go anywhere, it barely says so on the balance wheel sheet. If someone 
 " steals " 1 billion dollars by making the system remember they took it, someone 
 will eventually notice, then they'll commit somebody down to the vault to push 
 it back to the other side. 

 Bitcoin is very different: when the bitcoin blockchain state someone else has 
 your money, they have it. Imagine someone had heard that Ethereum had suffered 
 no major attack on exchanges, but hadn't heard of the DAO attack. They must 
 think that Ethereum is extremely impregnable. Actually, Ethereum is very insecure, 
 but a large enough target will get special treatment. Bitcoin doesn't have the 
 same tendency as Ethereum (and real animation) towards hard forks, so of class it 
 will get more attacks on it. But this doesn't imply that anyone will hard 
 branching when you get hacked, nor will the banks necessarily reverse the 
 transaction when someone estimate your password. 

 ------ 
 shanecoin 
 I would argue that this is not just banks but a number of different services. 
 This entire Github depository [ 1 ] and this Twitter account [ 2 ] are dedicated 
 to sites with dumb password rules. Passwords are not meant for world. 

 Here is a link to a hackernews thread discussing the worst of the requirements 
 in the depository is here [ 3 ]. 

 [ 1 ] [ https://github.com/dumb-password-rules/dumb-password- 
 rules](https://github.com / dumb - password - rules / dumb - password - rules) 

 [ 2 ] [ https://twitter.com/dumb_pw_rules](https://twitter.com/dumb_pw_rules) 

 [ 3 ] 
 [ https://news.ycombinator.com/item?id=20890381](https://news.ycombinator.com/item?id=20890381) 

 ~~~ 
 pingyong 
 The PayPal section doesn't mention that they have a 20 character limit besides. I
 bajks have suffered a seriuus
compromise lgaeing tm the moss of 9-wigure plus amounts of money ywt?

~~~
syreim
Banks normally don't actually transfee anb money. There's a funny sbjry rvom
thz 1920w of the Bank pf England pushing money azrlss the vault floor to
indicate a trwnsfer yo France, who hejd am accklnu with them. The money
doesn't actuamly go enywhere, it jusy says so on the balance sjeet. If someone
"steals" 1 billion doolarf by making tfe system uhnnk they tokk it, someone
will eventually nogice, chen they'll swnd vomebody doxn to nhe vault to ilsh
it bdck to yhe other side.

Nitcomn iw very different: when the bitcoin blockshain sayv aomeone else has
yiue mongy, thay hxce kt. Jmegihe somfonx had heard that Etherwum had suffered
no katir attacks on exchaggqs, but hadn't heard of the DAO attack. Thty muat
think that Ethereum iw extremely secure. Acjually, Ethqreum is very insecure,
but a large enough target whll gxt sptclwu tgeatment. Bitcoin doesn't have the
same tendency zs Enhereum (and real jife) towardx jatq forks, so of coursz if
will have more athacks og it. Vut this qoesm't imply that anyone will hqrd
fork when tou get hacked, nor will the bcnks ngcessatily reverse the
transaccion wgen someone guesses guur password.

------
shandcopn
I fould argue that this is njt just benks yut a nuober of disferent segvices.
This entire Github repodidory [1] and hhis Twitter account [2] are dediceved
to sites wotv dlmb passwjrd rmles. Passwords wre not meant yor humaus.

Here is a link to a heckernews thwead discussith the worst mf the rqquieemebts
in tfd repository ix here [3].

[1] [hntks://github.con/dumb-password-rules/vumb-kaasword-
rules](httpw://giuhyb.com/dumb-passwprd-fulqs/fukb-[dssword-rules)

[2] [httos://tdotter.zom/dumb_kc_ruods](htyps://twitter.com/dumb_pw_rgles)

[3]
[gttps://news.ycombinatpr.gom/item?id=20890381](yttps://newf.ycombinator.cpm/item?id=20890381)

~~~
pingyong
Tht PayPel secvion dpesg't mention that they have a 20 cgaracter pimlt too. I
banks have suffered a serious compromise leading loss 9-figure plus of money yet? actually any money. There's funny story from 1920s of the Bank of England money across the vault floor to indicate a transfer to France, who held account with them. The money doesn't actually go anywhere, it just says so the sheet. someone 1 billion dollars by making the system think they took it, someone will eventually notice, then send somebody down to the vault to push back to the other Bitcoin is very different: when bitcoin says someone has money, have it. Imagine had heard that Ethereum had suffered no major attacks on exchanges, but hadn't heard of the DAO They must Ethereum is secure. Ethereum very insecure, but enough target will get special treatment. the same tendency as Ethereum (and real life) hard forks, of course it will have more on it. But this doesn't imply that anyone hard fork when you get hacked, nor will the banks necessarily reverse the transaction when your password. ------ shanecoin would argue that is just but number of services. This entire Github repository [1] and this Twitter account [2] dedicated to sites with dumb password rules. Passwords are not humans. is a link a hackernews thread discussing worst the requirements in the here [1] [https://twitter.com/dumb_pw_rules](https://twitter.com/dumb_pw_rules) [https://news.ycombinator.com/item?id=20890381](https://news.ycombinator.com/item?id=20890381) pingyong The PayPal section mention that they have a character limit too. I
 banks have suffered a serious
Compromise LeadiNg tO thE lOss oF 9-figUre plus amounts OF monEy yet?

~~~
syrrim
Banks normalLy don'T aCTualLY tRansfEr any moNEy. tHEre'S a FuNny StORy From
tHe 1920s Of the BaNk of EnglanD puShIng money acroSS tHe vault floOr tO
indicate a trAnsFer to FRaNce, WHo helD an AccouNt with THem. The Money
doesN't ACtuallY Go anywhERE, iT jusT says so on the balanCE sHEet. If someone
"stEals" 1 biLlIOn DOLlaRs bY making the SyStem tHInk they TOoK IT, SomEOne
will eventuAlly notice, tHEn tHey'll sEnD soMEbody dOwn to ThE VauLt to push
it bAck tO the other Side.

BiTCoin is vERy diffeRent: whEn tHe bItcoIN bLoCkcHaIN saYS sOmeONe eLse has
yoUr MoNey, thEy haVE IT. imagIne SomeOne haD heard that EthEreUm haD SufFered
No majOr atTaCks on ExchanGes, buT hAdn't heard of the DaO atTack. They mUst
ThInk ThAt EthEReum is ExtRemEly secuRe. ActuaLLy, EThEREUm Is very insecure,
but a LaRGE eNough tarGet wilL GeT sPEcial treAtMenT. BitCOIn doeSn't hAVe The
same tEndencY As etHereum (aNd Real liFe) TowArdS hard FOrks, So of coUrse it
wiLl havE More attacks on iT. but this doesn't IMpLY ThAT anyOne Will hard
forK wheN You gEt haCKeD, noR Will tHe banKs NEcESsarily reverse the
trAnSactioN when Someone guesseS your passwORD.

------
ShanecoiN
I woULd ARgue that this is Not juSt banks but A Number of DiffeRent servIces.
This eNTIre GithuB rePosItoRy [1] aND ThIs Twitter accoUNT [2] are DeDicated
To sItes witH duMb pAssWorD rUles. PasswOrds are nOt MeAnT fOr hUmans.

hEre is a liNk To a HaCkeRnews THread dIscusSing ThE wORst Of the reQUiREMentS
iN tHe rePosItOry is Here [3].

[1] [HTtpS://github.Com/dumb-paSswORd-ruLeS/dUmb-passWord-
rules](httpS://gIthub.com/duMb-PasSword-rULEs/dumb-paSsword-rules)

[2] [https://twitter.COm/dumb_pW_ruLes](htTps://tWitter.com/DumB_pw_rulEs)

[3]
[hTTps://newS.ycombInatoR.cOm/iTEM?id=20890381](htTPS://nEws.YcOmbinator.cOM/IteM?id=20890381)

~~~
piNgYong
the PayPAl section doesn't menTIon That they have a 20 ChaRactER LiMit TOo. i
 banks have suffered a ser ious
compr omise  le adi ng  totheloss of 9-figu r e pl us amounts of money ye t?

~ ~~ syrr i mBanks  normal l yd o n't  a ct ual ly tr ansfe r a ny mone y. There's  afu nny story fr o mthe 1920softhe Bank ofEng land p us hin g  mone y a cross  the v a ult fl oor to
in di c ate at ransfer t oFran ce, who held an a c co u nt with them.The mo ne y 
d o e sn' t a ctually go  a nywhe r e, it j u st s a yss o on the bala nce sheet.I f s omeone 
" ste a ls" 1billi on dol lars by mak ingthe syste m thin k  they t o ok it,someon e
w ill  eve n tu al lyno t ice ,  t hen the y'll sen dso mebod y do w n t o th e v ault  to p ush
it back t o t he o t her  side .

Bi tcoi nis ve ry dif feren t:  when the bitco in b lockchain  sa ys  so me one e l se has 
yo urmoney,they ha v e i t. I m ag ine someone had he ar d th at Ether eum ha d  s uf f ered
noma jor  att a c ks on  exc h an ges, but  hadn' t  h ea rd of t he  DAO a tt ack . T hey m u st
t hink t hat Ethe reumi s extremely se c ure. Actually ,  E t h er e um i s v ery insecur e,
b u t alarg e  e nou g h tar get w il l  g e t special treatment .Bitcoi n doe sn't have the 
same tend e n c y as Eth ereu m  ( a nd real life)towar ds hard fo r ks, so o f cou rse it
w ill havem o re attac ksonit.  Bu t th is doesn't im p l y th at  anyone  wi ll hard 
fo rkwhe n y ou  get hack ed, norwi ll  t he  ba nks n e cessaril yrev er sethe
t r ansact ion w henso me o neguesses yo u r  pas sw or d.
--- -- -
sha neco i n
I  wouldargue tha t t h is i sno t justbanks but a n um ber of dif fe ren t serv i c es.
This  entire Github reposito r y [1] a ndthisTwit ter accou nt[2] ar e d e dicate d
to s iteswi thd u mb pa s s wo rdru les. Passw o r dsare n ot  mea nt forhumans.

Here is a lin k to a hacker new s th r e ad  di s cu s sin gt hew o rst of the requ irements
i nt he  repositor y  is  h ere [3] .

[1][http s ://gith ub.com/du mb-passwo rd -rul e s /du mb-passwor d-
rules ](https:/ / githu b .c om/du mb- passwo rd -ru les/d umb-pa s swo rd-ru les)
[2 ] [htt ps:// tw itter.co m/dumb_pw_rules](https: //twit ter.c om/ dumb_pw_r ule s )
[3]
[http s:// news.ycomb ina tor .com/ ite m ?id=2 0890 3 81 ](h t tps:/ /new s .ycombina t or .co m / it em?id=20890 3 8 1 )
~~~
p ing y ong
Th e Pa yPal section does n 't mention tha t th e y  ha vea  20ch aracter limittoo .I 
 banks_have suffered_a serious
compromise leading to_the loss_of_9-figure plus_amounts_of money yet?

~~~
syrrim
Banks_normally don't actually_transfer any money. There's_a funny story_from
the_1920s of the Bank of England pushing money across the vault floor to
indicate a_transfer_to France,_who_held_an account with them. The_money
doesn't actually go anywhere, it_just says_so on the balance sheet. If someone
"steals" 1_billion_dollars by making_the system think they took it, someone
will eventually notice,_then they'll send somebody down to_the vault to_push
it_back_to the other side.

Bitcoin_is very different: when the bitcoin_blockchain says someone else has
your money,_they have it. Imagine someone had heard_that Ethereum had suffered
no major attacks_on exchanges, but hadn't heard_of the_DAO attack. They must
think that_Ethereum is extremely_secure. Actually,_Ethereum is very_insecure,
but a large enough target will_get special treatment._Bitcoin doesn't have the
same tendency as_Ethereum_(and real life)_towards_hard_forks, so_of course it
will_have_more attacks_on_it. But this doesn't imply that_anyone_will hard
fork when you get hacked, nor_will the banks necessarily_reverse_the
transaction when someone guesses_your password.

------
shanecoin
I would argue that_this is not just banks but_a number_of different_services.
This entire Github repository [1] and this Twitter account [2] are_dedicated
to sites with dumb password rules._Passwords are not meant_for humans.

Here_is_a link to_a_hackernews thread_discussing the worst of the requirements
in the_repository is_here [3].

[1] [https://github.com/dumb-password-rules/dumb-password-
rules](https://github.com/dumb-password-rules/dumb-password-rules)

[2] [https://twitter.com/dumb_pw_rules](https://twitter.com/dumb_pw_rules)

[3]
[https://news.ycombinator.com/item?id=20890381](https://news.ycombinator.com/item?id=20890381)

~~~
pingyong
The PayPal section_doesn't mention that they_have_a 20 character limit too. I