Skip to main content


“Enterprise-level developers” working on mission critical banking software don’t make people have to open up developer tools to see the regular expression error on a registration form challenge 2026.

It’s not rocket science, folks.

*smdh*

#capitalism #mainstream #mediocrity

in reply to Aral Balkan

If you’re trying to register for a Bank of Ireland account and the form fails silently, don’t worry, it’s simple to find out what happened and fix it.

1. Open up developer tools on your browser
2. Copy the failed regular expression from the console
3. Put it, and your generated password into Regexr (regexr.com)

And voila, as you can see the problem with mine* was that it hit the 16 character limit which was, to keep things exciting, not mentioned on the page.

Simples.

What muppets!

* Don’t worry, it’s a different one now.

#capitalism #mainstream #mediocrity #BankOfIreland #banks #design #web #dev #ireland

This entry was edited (1 day ago)
in reply to Aral Balkan

Me: I need to reluctantly do some adulting.

Also me: Ends up debugging some bank’s stupid web site.

🤷‍♂️

in reply to Aral Balkan

Mine once had a 21 character limit on the web, but a 20 character limit mobile web, and the error was "wrong password".

Does anyone test anything?

in reply to Aral Balkan

technology departments across banks struggle to define the simplest of business rules. Who knows what’s happening with complex processes
in reply to Aral Balkan

WHY in the fuck's name would you want a 16 character limit on a bank password
Why do banks consistently have worse security than your average website
in reply to Aral Balkan

having a nice and concise password is essential for banking I guess 🤪
in reply to Aral Balkan

Dumb rules for passwords really wind me up. Why should I *have* to include a number, for example? That just reduces the search space for any attacker. And then there are sites that prevent the use of certain special characters, again for no good reason (apart from the bad design of their back end, I suppose).

Secret validation fails just compound the problem.

in reply to Aral Balkan

but… but… enterprise-quality software built using methods and processes following best industrial practise!
in reply to Aral Balkan

Also: how do you expect people to not get phished when your production stuff uses domains that look like that?
in reply to JKB

@jkb Yeah, right. Guess what, they outsource to Microsoft. Zero surprises there.
@JKB
in reply to Aral Balkan

holy f that url! I’d be having an emotional breakdown between having to open a bank account and being sure someone was stealing my identity.