Password control on trading site

[fastesthamster]

I think this is a pretty terrible password policy:

Password Control

* Same username and password combinations may be rejected.
* Your chosen username must consist of at least 3 characters, but less than 8.
* Your password must contain 8 characters and must contain at least one uppercase letter, one lower case letter, and one numerical character.
* Your username and password may not be the same.
* No special characters are allowed.

You've now told the hackers that all passwords are exactly 8 characters, and don't have any special characters. Great work! And no special characters (!@#$%^ etc). Nice reduced search space.

 

[InTheCube]

LOL.. fail!

Which site is this? Post a link!

 

[fastesthamster]

https://boepersonal.nedsecure.co.za/

A bit worrying considering a large portion of my capital is sitting behind 8 measly characters.