An empty password will pass this check because the code uses the length of the user entry, not the length of the correct password. Other potential problems (buffer overflows, etc.) are left as an exercise for the reader. [Shameless plug: If you enjoy problems like this, have strong security experience, communicate well, and want a job at a fun (and profitable) company, visit http://www.cryptography.com/company/careers.html. ]

10) Re:fhnlsfdlkm&5nlkd%Bvbcvbc
by Anonymous Coward

0rrsn Hi, I'm wondering if