I think they understand that. They are just calling out how outdated those password requirements are. In reality, a 32-character password made up of just alphanumeric characters is more secure than an 8-character password that also includes special characters. OP knows this fact, but they see that the website does not, so they are bringing that up here.
Same boat here. Don't get me started. First of all, they originated back then by collecting all the community-made tabs, and then they turned around and made them their propietery content. So there are no good alternatives that have "all" the tabs. Assholes.
And the app... It's so bloated, slow, and crash prone. It should be simple to do well.. It just needs to display literal text, and save a list of them for me. But every tap takes anywhere from 2-10 seconds to take effect. And don't tap anything while it's loading, because those taps will be queued up and take effect all at once on the next screen. I have a giant list of saved tabs and there's no way to group or sort through them, unless I wanted to manually organize them into playlists and keep them up to date. So I'll be scrolled way down the list, which takes minutes to get back to, and it crashes. They keep adding features no one asked for, and constantly begging for money. Even though I paid for it many years ago. I hate this app so much.
I'm slowly moving my collection over to Songbook Pro. It isn't perfect, but you can search ultimateguitar's tabs and save them locally.
It's incredible how quickly it loads a page of text (when comparing to UG's pathetically terrible app experience). And I've never had it CTD because I dared to open a saved song.
On a side note but related, https://github.com/kmille/freetar is a private front-end for Ultimate Guitar that's amazing. Free public instance at freetar.de.
Never went back to UG after finding this, so much better than navigating their awful website.
At least that's better than when the site accepts the password but doesn't actually let you log in with it.
My old college was like that with their SSO. It would accept any type of password you threw at it. But then you just wouldn't be able to sign into anything, so you'd be forced to reset your password again, but it doesn't tell you that's what the problem is, so you just have to sorta guess what it was.
I got to discover that one program at work let's you change your password as expected but silently drops everything after character 16 entered while doing so. Of course that's not mentioned in any documentation I have access to.
Been there. It's somewhat ok if they do it consistently. E.g. registration and login form both allow more than 16 chars and then just truncate the password silently.
Worse is if the registration form does it, but the login form uses the full password you entered (or vice versa) and then the login fails because the password doesn't match...
I feel like work passwords are just always the worst security you will ever see, which sucks because you would think they would be the most important security.
I had a job once that you could put a password in and it was across multiple intranet services
Some services wanted the password case sensitive. Some wanted the password either as all caps or all lowercase.
So anytime you put your password in, you essentially had to put the password in up to three times unless you knew how that service had it.
Documentation would have please put password in as all caps or please have password completely lowercase
Honestly, there was an unwritten rule that when you put your password in, you just did it in all caps. That way you only had to try two different passwords instead of three different passwords if you couldn't remember what service it was.
Very concerning for comp sec. Fortune 100 company as well.
Until you try your regular password for the first time in 6 months, it fails, you eventually give up and try to reset it, then you see the rules, and suddenly you remember the modification you made to the pattern but it's too late to revert.
Login pages should show their rules when the password fails.
36 Comments
MrQuallzin@pie.eyeofthestorm.place · 95 pts · 107d
Its not about the length of your password, you're just not meeting the password requirements. You're missing a special character
SatyrSack@quokk.au · 49 pts · 107d
I think they understand that. They are just calling out how outdated those password requirements are. In reality, a 32-character password made up of just alphanumeric characters is more secure than an 8-character password that also includes special characters. OP knows this fact, but they see that the website does not, so they are bringing that up here.
bigbangdangler@reddthat.com · 17 pts · 107d
Yeah OK, I just had to read that twice to see you're right.
The title is ambiguous (or perhaps vague, more accurately).
"doesn't let me use my 32 char password" can be interpreted as:
it does not allow passwords of 32 characters in length, regardless of composition
it does allow passwords of 32 characters in length, which should be sufficient with or without special characters
In one reading, the special character requirement is the issue. In the other, the length.
Yay for English.
FiskFisk33@startrek.website · 7 pts · 107d
"Your password doesnt meet the required 64 bits of entropy"
Clent@lemmy.dbzer0.com · 13 pts · 107d
Proving yet again, no matter how clear the messaging users won't read it.
snowykitty@piefed.blahaj.zone · -1 pts · 107d
obviously they read it...
valar@lemmy.ca · 47 pts · 107d
Even worse, if you complete the registration you have to use that shitty app
Zombiepirate@lemmy.world · 11 pts · 107d
I don't know why it takes 45 seconds every time it needs to update the screen.
valar@lemmy.ca · 4 pts · 107d
It's really bad if you have a long list of saved tabs.
terry_jerry@sh.itjust.works · 6 pts · 107d
Yeah they've got me locked in cause I've been using the site for 20 yrs now. Hate how bad the app has gotten.
valar@lemmy.ca · 3 pts · 107d
Same boat here. Don't get me started. First of all, they originated back then by collecting all the community-made tabs, and then they turned around and made them their propietery content. So there are no good alternatives that have "all" the tabs. Assholes.
And the app... It's so bloated, slow, and crash prone. It should be simple to do well.. It just needs to display literal text, and save a list of them for me. But every tap takes anywhere from 2-10 seconds to take effect. And don't tap anything while it's loading, because those taps will be queued up and take effect all at once on the next screen. I have a giant list of saved tabs and there's no way to group or sort through them, unless I wanted to manually organize them into playlists and keep them up to date. So I'll be scrolled way down the list, which takes minutes to get back to, and it crashes. They keep adding features no one asked for, and constantly begging for money. Even though I paid for it many years ago. I hate this app so much.
Zombiepirate@lemmy.world · 2 pts · 107d
I'm slowly moving my collection over to Songbook Pro. It isn't perfect, but you can search ultimateguitar's tabs and save them locally.
It's incredible how quickly it loads a page of text (when comparing to UG's pathetically terrible app experience). And I've never had it CTD because I dared to open a saved song.
osanna@lemmy.vg · 3 pts · 107d
Pic isn’t loading for me. What app is it?
valar@lemmy.ca · 2 pts · 107d
Ultimate Guitar
inbn@lemmy.zip · 14 pts · 107d
On a side note but related, https://github.com/kmille/freetar is a private front-end for Ultimate Guitar that's amazing. Free public instance at freetar.de.
Never went back to UG after finding this, so much better than navigating their awful website.
TrickDacy@lemmy.world · 12 pts · 107d
But at least it tells you very clearly what the missed requirement is.
UltraBlack@lemmy.world · 3 pts · 107d
These requirements are often so stupid
i_stole_ur_taco@lemmy.ca · 11 pts · 107d
correct horse battery staple
ThatGuy46475@lemmy.world · 5 pts · 107d
Correcthorsebatterystaple1!
Pika@sh.itjust.works · 10 pts · 107d
At least that's better than when the site accepts the password but doesn't actually let you log in with it.
My old college was like that with their SSO. It would accept any type of password you threw at it. But then you just wouldn't be able to sign into anything, so you'd be forced to reset your password again, but it doesn't tell you that's what the problem is, so you just have to sorta guess what it was.
bzLem0n@lemmy.ca · 3 pts · 107d
I got to discover that one program at work let's you change your password as expected but silently drops everything after character 16 entered while doing so. Of course that's not mentioned in any documentation I have access to.
elvith@feddit.org · 3 pts · 107d
Been there. It's somewhat ok if they do it consistently. E.g. registration and login form both allow more than 16 chars and then just truncate the password silently.
Worse is if the registration form does it, but the login form uses the full password you entered (or vice versa) and then the login fails because the password doesn't match...
Pika@sh.itjust.works · 2 pts · 107d
I feel like work passwords are just always the worst security you will ever see, which sucks because you would think they would be the most important security.
I had a job once that you could put a password in and it was across multiple intranet services
Some services wanted the password case sensitive. Some wanted the password either as all caps or all lowercase.
So anytime you put your password in, you essentially had to put the password in up to three times unless you knew how that service had it.
Documentation would have please put password in as all caps or please have password completely lowercase
Honestly, there was an unwritten rule that when you put your password in, you just did it in all caps. That way you only had to try two different passwords instead of three different passwords if you couldn't remember what service it was.
Very concerning for comp sec. Fortune 100 company as well.
ivanafterall@lemmy.world · 10 pts · 107d
What are the first 3 characters? Maybe one of those is an invalid character? Do you use that password anywhere else, for comparison?
markz@suppo.fi · 31 pts · 107d
It seems to be missing special characters
axh@lemmy.world · 3 pts · 107d
Maybe... The answer is on the screen: there is no special character in the password...
Just add an exclamation mark at the end, like a normal person
Skanky@lemmy.world · 9 pts · 106d
Fuck UG. Seriously. Find something better. I'd suggest Songsterr.
UG basically started as a "free tabs" website and collected everyone's contributions. Later, they pay walled all of it without compensating anyone.
Go suck a dick, UG.
mrbeano@lemmy.zip · 8 pts · 107d
Need moar special!!! Give us special!!!
vivalapivo@lemmy.today · 7 pts · 107d
It's not the password that is weak. Your flesh is weak and it waits to be consumed, tiny human
Michal@programming.dev · 7 pts · 107d
Fuck that app. It's enshittified beyond usefulness.
danciestlobster@lemmy.zip · 5 pts · 107d
Maybe the characters you picked were just weak? Use stronger characters next time /s
ohshit604@sh.itjust.works · 1 pts · 107d
DrunkAnRoot@sh.itjust.works · 4 pts · 107d
ultimate guitar will also beg you to pay.
axh@lemmy.world · 4 pts · 107d
Just add an exclamation mark at the end. Problem solved.
My bank has a limit of MAXIMUM number of characters. That is stupid.
XeroxCool@lemmy.world · 4 pts · 107d
Until you try your regular password for the first time in 6 months, it fails, you eventually give up and try to reset it, then you see the rules, and suddenly you remember the modification you made to the pattern but it's too late to revert.
Login pages should show their rules when the password fails.
timhayes1991@lemmy.zip · 1 pts · 107d
Were you able to get the pro account before they turned it into a subscription?
Edit: just realized you are just now signing up... 🤦♂️
MonkderVierte@lemmy.zip · 1 pts · 107d
Does Ebay allow "special characters" (:;&*+/ ) now?