- Okta, a security company, had a vulnerability where usernames over 52 characters could bypass password requirements ๐ค
- Bcrypt, a common password hashing algorithm, has a maximum input length of 72 bytes ๐๏ธ
- This means if a username exceeds this length, the hashing process can be manipulated, leading to security risks โ ๏ธ
- The vulnerability highlights the importance of careful code review and understanding the limitations of security tools ๐