<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Purgatory on DVLUP</title><link>/en/tags/purgatory/</link><description>Recent content in Purgatory on DVLUP</description><generator>Hugo</generator><language>en-US</language><lastBuildDate>Sun, 22 Mar 2026 00:00:00 +0000</lastBuildDate><atom:link href="/en/tags/purgatory/index.xml" rel="self" type="application/rss+xml"/><item><title>Password Purgatory, a C# Scammer Trap</title><link>/en/blog/2026.03.22-csharp-scammer-trap/</link><pubDate>Sun, 22 Mar 2026 00:00:00 +0000</pubDate><guid>/en/blog/2026.03.22-csharp-scammer-trap/</guid><description>&lt;p&gt;This is a reimagined version of Troy Hunt&amp;rsquo;s &lt;a href="https://www.troyhunt.com/building-password-purgatory-with-cloudflare-pages-and-workers/" target="_blank" rel="noopener"&gt;Password Purgatory&lt;/a&gt;&#10;; written as a dotnet app and automatically published to Azure. It is not a 1:1 recreation of Troy&amp;rsquo;s, but maintains its spirit, see all the source code on GitHub at &lt;a href="https://github.com/LanceMcCarthy/dotnet-password-purgatory" target="_blank" rel="noopener"&gt;dotnet-password-purgatory&lt;/a&gt;&#10;&lt;/p&gt;&#10;&lt;p&gt;Just imagine, thousands of dollars is only a button click away, but your password keeps failing because of with the following rules:&lt;/p&gt;&#10;&lt;ol&gt;&#10;&lt;li&gt;&lt;img src="../../../en/blog/2026.03.22-csharp-scammer-trap/184453467-4962c6c2-d955-4270-93d8-8ecb02c26fa8.png" alt="image"&gt;&#10;&lt;ul&gt;&#10;&lt;li&gt;First entry form seems normal, some standard client-side validation to make sure I complete both fields.&lt;/li&gt;&#10;&lt;/ul&gt;&#10;&lt;/li&gt;&#10;&lt;li&gt;&lt;img src="../../../en/blog/2026.03.22-csharp-scammer-trap/184453247-50578c2f-6fbb-4326-aff2-fb0bebbb2412.png" alt="image"&gt;&#10;&lt;ul&gt;&#10;&lt;li&gt;Okay, so I didn&amp;rsquo;t have a number in my password&amp;hellip;&lt;/li&gt;&#10;&lt;/ul&gt;&#10;&lt;/li&gt;&#10;&lt;li&gt;&lt;img src="../../../en/blog/2026.03.22-csharp-scammer-trap/184453267-eab6d8e0-945b-4cfb-b0b3-7c343711c0dc.png" alt="image"&gt;&#10;&lt;ul&gt;&#10;&lt;li&gt;Whoops, maybe I shouldn&amp;rsquo;t have just jammed a &amp;ldquo;1&amp;rdquo; on the end of the password&amp;hellip;&lt;/li&gt;&#10;&lt;/ul&gt;&#10;&lt;/li&gt;&#10;&lt;li&gt;&lt;img src="../../../en/blog/2026.03.22-csharp-scammer-trap/184453272-774a05a3-21ac-4aba-8754-6c4e8e66e3e3.png" alt="image"&gt;&#10;&lt;ul&gt;&#10;&lt;li&gt;Ugh, okay, an upper-case character (starting to feel annoyed).&lt;/li&gt;&#10;&lt;/ul&gt;&#10;&lt;/li&gt;&#10;&lt;li&gt;&lt;img src="../../../en/blog/2026.03.22-csharp-scammer-trap/184453276-464481ef-e3a7-4347-847f-8d45edfb1921.png" alt="image"&gt;&#10;&lt;ul&gt;&#10;&lt;li&gt;This seems my own fault, nothing lets you use short password anymore.&lt;/li&gt;&#10;&lt;/ul&gt;&#10;&lt;/li&gt;&#10;&lt;li&gt;&lt;img src="../../../en/blog/2026.03.22-csharp-scammer-trap/184453281-36502559-19f7-464d-8e8f-a4e57a87ed28.png" alt="image"&gt;&#10;&lt;ul&gt;&#10;&lt;li&gt;Wait, what? This is starting to seem like I&amp;rsquo;m being given the run-around&amp;hellip; but adding &amp;lsquo;dog&amp;rsquo; to the end is easy enough&amp;hellip;&lt;/li&gt;&#10;&lt;/ul&gt;&#10;&lt;/li&gt;&#10;&lt;li&gt;&lt;img src="../../../en/blog/2026.03.22-csharp-scammer-trap/184453293-b1e46b2f-7f54-4868-b7c6-13ed8def1ac7.png" alt="image"&gt;&#10;&lt;ul&gt;&#10;&lt;li&gt;Really, cat? Okay, three letters, lets add it and keep going because I want to see where this is going.&lt;/li&gt;&#10;&lt;/ul&gt;&#10;&lt;/li&gt;&#10;&lt;li&gt;&lt;img src="../../../en/blog/2026.03.22-csharp-scammer-trap/184453301-b28f9136-a510-4c65-a186-7e4aac0f0ec4.png" alt="image"&gt;&lt;/li&gt;&#10;&lt;/ol&gt;&#10;&lt;p&gt;If they keep going&amp;hellip;&lt;/p&gt;</description></item></channel></rss>