Usernames removed to prevent brigading
I hate when websites have some weird rules for passwords, and show the rule when you are creating the password, but not when entering it. How am I supposed to remember the password must begin and end with a special character?
I can’t recommend password managers enough, because you will never have this issue again.
and when the rule is also wrong example: password must contain special charcters the password contained : and ^ if those aren’t special characters idk what is
maybe they were looking for extra special characters like 🁄 or ⶸ. Who am I kidding, RFC 1738 tells us that literally everything is unsafe and you know, we need to prepare for the inevitable occasion when the password somehow ends up inside an URL.
The characters “<” and “>” are unsafe because they are used as the delimiters around URLs in free text;
the quote mark (“”") is used to delimit URLs in some systems.
The character “#” is unsafe
The character “%” is unsafeIt ends up with
Thus, only alphanumerics, the special characters
$ - _ . + ! * ’ ( ) ,
are safe
Having to alter my one generic password I use for random ass website because there’s a stupid extra rule is usually annoying me enough that I don’t register lmao.
Password manager?
I use it for important things that require actual security. Everything else gets the one password treatment.
I use a mental algorithm that means my password is always different on paper, but is always deducible by me.
Jokes aside, I have been blocked many times by overzealous email validation. Yes, my email has a plus sign in it. This is allowed under RFC5322, so deal with it. It is better to have no validation at all than incorrect validation.
Even worse is when they strip the plus sign out after the fact and then you can’t log in anymore because you didn’t realize that’s what has happened.
Yees this has happened to me before but with passwords. They have some length limit that they clamp to so you can’t login after registering and I have to do a password reset right after signing up. Happened multiple times to me.
This is criminal. You already send me a validation email, just check for an @ and leave me be
The best email validation is just sending an email to whatever provided by the user. If user receives an email and validates it, than its validated.
Email address spec is convoluted and this is indeed the best way. Noobs and ninja do it this way, normies try to validate before sending email
A plus sign? That’s nothing, LOL
Quote:
If you disagree, or have any other comments, feel free to email me at
'*+-/=?^_`{|}~#$@[IPv6:2602:f977:800:0:e276:63ff:fe72:3900]– if your mail client lets you, that is.
I dont know if it’s just me, but this comment is breaking the rendering of Voyager
Nice, I was able to send an email to that.
I like this issue in the form of a quiz
TIL:
🫱@🫲
is a valid e-mail address.
I had a website not let me enter a proton.me email address, when I changed it to my custom.fyi address, it worked fine. They wanted a three letter TLD.
No, I think they just blocked Proton email addresses. I’ve seen multiple services doing that.
The worst sites are the ones that let you sign up with an unusual address but not log in. The worst I‘ve seen was some ticket system that rejected dfyx+theirdomain@mydomain after I clicked the link in their confirmation email.
There’s an aspect of my surname which is somewhat unusual (at least in my country). As a result I occasionally get form validation errors when entering it. Sometimes those errors are extremely inscrutable. Sometimes a form validates but something elsewhere makes unvalidated assumptions about names which then breaks in completely unpredictable names…
Does it fall into one of the falsehoods programmers believe about names? https://www.kalzumeus.com/2010/06/17/falsehoods-programmers-believe-about-names/
Actually no. In fact, I think most people who thought for a minute would realise names like mine exist, it’s just that sometimes people working systems don’t think for a minute ;)
The number of scripts I’ve seen that would break with an O’Neill or O’Brien is too high. Worse is some people don’t get it when pointed out.
Not sure if you also do aliases as well but I’ve seen an increase in websites flagging providers like addy.io as well. Extremely annoying that so many websites think they are so important that they refuse an alias.
I had a site refuse my email address for my .net domain. Like wtf, if it’s not .com it’s not a real email address? Idk what that was about.
migadu has a cool workaround.
instead of:
alias+user@domain.tldyou give:
alias@user.domain.tldthen internally it transforms it to an alias when it comes in.
Same although for a totally different reason. There are some services that really don’t like gtlds and they will say your address is invalid if it doesn’t end in .com, .net, or .org…all my serious domains are gtld…so some services have emails on meme domains because the only domains I have with traditional tlds are memes
The issue this is referring to is because the user cannot paste into a text field. And the user was not rude about it either.
So instead of fixing the actual problem, the developer went nuclear and removed the validation. A dick move in my opinion given the developer’s attitude.
~It’s more sad than funny. 🤷♂️~
I’m guessing removing the validation fixed the pasting, which means it did fix the actual problem?
I don’t know what that repo does. But, chances are the dude was just fucking tired of dealing with curseforge. Total garbage scum software.
It’s prism. A multi-launcher for Minecraft Java edition.
IMO as a developer this is a sane change. There’s no telling when the format of the first-party api key will change. They may switch from reference tokens to JWT tokens tomorrow. The validation should be using the token and seeing if it works.
If they had made the change for that reason, sure. But the actual stated cause was some pretty thing.
So the users realized their mistakes and stopped complaining……and other jokes public project maintainers tell themselves while laughing in tears

If only I had a penny each time a user told something doesn’t work when it shouldnt’ve.









