Cybersecurity

8129 readers

28 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago

MODERATORS

kid@sh.itjust.works

Lanky_Pomegranate530@midwest.social

Is it fine if a website says "email already in use" before you hit submit? (lemmy.world)

submitted 2 weeks ago by Jankatarch@lemmy.world to c/cybersecurity@sh.itjust.works

42 comments fedilink hide all child comments

I remember hearing before that it's a sign they are storing your info unencrypted but I never checked.

Is this true? I was logging into a .gov website and noticed it does that.

you are viewing a single comment's thread
view the rest of the comments

[–] sugar_in_your_tea@sh.itjust.works 2 points 1 week ago (1 children)

Right, and trim is for the beginning and end. FUTO Keyboard will put spaces after periods, so it'll frequently try to enter something like first. Last @domain.Com. The casing isn't an issue because emails (and all URLs) should be treated as case insensitive.

I wouldn't expect a site to remove all whitespace, only leading and talking trailing whitespace, and then present an error if the email address is obviously invalid. There are libraries for this, and I think a simple regex would also be sufficient to catch most issues (search online for a vetted one).

Spaces are technically allowed before the @, provided you wrap it in quotes. That's incredibly rare and validating that is a bit of a pain, so I'd stick with making it an error instead of silently stripping what could be a valid, but unsupported, email address, since that would cause more confusion than an error.

[–] _core@sh.itjust.works 1 points 1 week ago (1 children)

I didn't know spaces were technically allowed before the @. TIL

[–] sugar_in_your_tea@sh.itjust.works 1 points 1 week ago

Technically, but yeah, it's super rare, and most places don't support it.