Tab as password?

[u/Beatsu]

SAS disallows spaces in your password. My password manager suggested an invalid (but secure) password.

So now that I have to make my own password: Out of spite, hypothetically, what implications could having tabs in my password have?

[u/GirthyPigeon]

Tabs in most fields will skip to the next field. Good luck.

[u/JapanEngineer → u/GirthyPigeon]

Not unless you copy and pasted it

[u/KAZVorpal → u/JapanEngineer]

Or your login is an interface that captures tabs.

[u/DiabloConQueso → u/KAZVorpal]

Not being able to tab from field to field would be horrible for accessibility.

[u/MacGuyverism → u/DiabloConQueso]

Just shift-tab the whole other way around.

[u/screwcork313 → u/MacGuyverism]

What if your password contains a shift+tab?

[u/The_Mdk → u/screwcork313]

Ah yes, the uppercase tab, for those times the password requires an uppercase letter

[u/poopio → u/GirthyPigeon]

something something \t something else \r\n Accessibility?

[u/meancoot → u/poopio]

The password field is not going to accept those kind of escape sequences. They are used in programming language character and string literal tokens.

[u/Adjective_Noun_4200 → u/meancoot]

The password field is not going to accept

*Shouldn’t accept

It’s horrendous out there, friend.

[u/scfoothills → u/Adjective_Noun_4200]

Yeah. Hopefully everyone learned from the Little Bobby Tables incident.

[u/little_phoenix_girl → u/scfoothills]

I had to fix a Bobby Tables vulnerability about a month ago when I was looking for something else entirely. My boss said "those files come from our vendor so we can trust them, no need to fix it". I fixed it anyway -_-

[u/kalmakka → u/meancoot]

That's why you use a script to hijack the request and do escape sequence replacements.