xthexder

joined 1 year ago
[–] xthexder@l.sw0.com 4 points 3 days ago

Yeah, multiple languages or even putting an ê or something in an English password to mix things up. It makes perfect sense to allow.

It's a good thing they require each codepoint to be treated as one character for the length limit, since "🤔🤣" is 8 bytes on its own, but the unicode prefix is trivial to guess.

[–] xthexder@l.sw0.com 4 points 3 days ago

Storing credit card data has its own set of strict security rules that need to be followed. It's also the credit card company's problem, not yours, as long as you dispute any fraudulent charges early enough.

I'm coming at this from the perspective of a developer. A user can always use a longer password (and you should), but it's technically possible to make an 8 character password secure, thus the NIST recommend minimum.

[–] xthexder@l.sw0.com 5 points 3 days ago

Normally the term for this is headless rendering, but I think in this case it's more like head-only rendering 😆

[–] xthexder@l.sw0.com 2 points 3 days ago* (last edited 3 days ago) (2 children)

Newer password hashing algorithms have ways of combatting this. For example, argon2 will use a large amount of memory and CPU and can be tuned for execution time. So theoretically you could configure it to take 0.5 seconds per hash calculation and use 1 GB or more of ram. That's going to be extremely difficult to bruteforce 8 characters.

The trade-off is it will take a second or two to login each time, but if you've got some secondary pin system in place for frequent reauthentication, it can be a pretty good setup.

Another disadvantage is the algorithm effectively gets less secure the less powerful your local device is. Calculating that same 0.5s hash on a beefy server vs your phone could make it take way longer or even impossible without enough ram.

[–] xthexder@l.sw0.com 4 points 3 days ago (1 children)

And here I wrote an AutoHotKey script to type out my clipboard a character at a time so I can paste stuff into this remote desktop software I'm using that doesn't support paste...

It's kinda necessary when the server's unlock password is 256 characters long and completely random.

[–] xthexder@l.sw0.com 28 points 3 days ago (11 children)

Interesting that unicode support is suggested. Emoji passwords could be fun.

[–] xthexder@l.sw0.com 5 points 4 days ago (1 children)

I've been told in the past you shouldn't make public posts with your travel plans. You're broadcasting that thieves can break in to your house and clean it out without worrying when you'll be back.

Just tell your friends/family directly

[–] xthexder@l.sw0.com 8 points 4 days ago

I'd say "for now", but at least we've got the EU protecting us from that possibility.

[–] xthexder@l.sw0.com 6 points 4 days ago (1 children)

It takes less than 30 seconds to install uBlock Origin. It's the first thing I do on a new install after replacing Edge with Firefox

[–] xthexder@l.sw0.com 29 points 5 days ago (1 children)

If the cat thought you had nothing to offer, they wouldn't be coming to you. I'm pretty sure most house cats have been trained to think humans are magic food dispensers.

[–] xthexder@l.sw0.com 2 points 6 days ago* (last edited 5 days ago)

Lol, $100 would be a deal now. It's $140-200 for Windows 11 depending on if you get Home or Pro.

I looked up how much it would cost to get a Windows Server license to run in a VM on my linux server, and that's a minimum of $500 (but possibly more depending on factors that are irrelevant as an individual). I decided I'd run unactivated Win10Home instead with some registry hacks to make things auto-start the way I want. If that stops working, I guess I'll just stop doing automated Windows CI.

 

I was on a road trip through the prairies and had to stop on the side of the road to watch the northern lights. The entire sky in all directions was lit up. I was able to take this shot with the big dipper visible.

4-second exposure, Sony A9 II, f2.8 24mm Sigma Lens, taken Sept 18, 2023

view more: next ›