6 ms·
Almost, the password is ********.
by Scarblac 3y ago
Almost, the password is ********.
- bayindirh 3y agoI can't read it. pfft
- deleted 3y ago[deleted]
- miroljub 3y agoThat's because of the HN security. It prints all passwords as stars. You can try putting your HN password in a comment, it would be visible only by you, and the others will not see it.
- meepmorp 3y agohunter1
- markx2 3y agoClose. hunter2
- meepmorp 3y agoWait, how did you see my password?
- test1235 3y agowe see it as asterisks ... you see it as hunter2 and not **** 'cos it's your password
- theginger 3y agoWhat? I just see stars
- CoastalCoder 3y agoGet to a doctor!
- pigeons 3y agoWhat? I just see stars Have you seen a doctor? No, just stars
- dllthomas 3y agoReady when you are, Raul.
- notarget137 3y agoHow about ****** Did it work?
- tomrod 3y agoOh wow, you kiss your mother with that mouth?
- actionfromafar 3y agoI use my fingers to type passwords and ehh...
- bayindirh 3y agoI guess you're right. My HN password is *****. When I edit, I can see it, but when I save the comment, it becomes starred. It even randomizes the length every time I save. Brilliant!
- GTP 3y agoBut this also means that they know your plaintext password, meaning that they're saving passwords in plaintext. Given that this is mostly a technical community, it's much more the risk of keeping a database of plaintext passwords than the benefit of being able to obfuscate passwords in comments. EDIT: thanks to another commenter, I understood that what's happening in the above comments is just a meme and HN isn't storing plaintext passwords. Sorry for the misunderstanding.
- Volundr 3y agoIn case you're unclear why your being down voted, comment chain is a riff on one of the more famous bash.org quotes: https://knowyourmeme.com/memes/hunter2 https://knowyourmeme.com/memes/hunter2. HN does not actually know your password or hide it in comments.
- Duanemclemore 3y ago(whistles softly as he changes password from a string of twelve asterisks to ******)
- mewpmewp2 3y ago> HN does not actually know your password or hide it in comments. Does it not know? What if I post it in this comment? My password is *****.
- svnt 3y agoWhat actually happens is more complex: when you type a *******, HN tries to log in once for every string in your *******, and then when it succeeds it goes back and replaces that string with a randomized length of asterisks.
- nirui 3y agoThis has to be a joke. The only way it can be realistically implemented involves the storage of clear-text user password to enable string replacement during comment submission. Either that or converting user comment to a prefix/suffix table (or something similar) and then hash each item to search for a match. Both option is ridiculously unnecessary. Anyway, my HN password is ****. I bet it don't work.
- thomaslord 3y agoFortunately with modern serverless architecture, it's possible to make this performant! Just split up each comment into words and dispatch each word to a queue where AWS Lambda workers can check the words against the user's password hash. It might cost $20 to process each comment, but at least it'll autoscale to handle any comment volume you throw at it!
- Affric 3y agoCan passwords include spaces?
- deleted 3y ago[deleted]
- zellyn 3y agoI love each and every one of you who have posted into this subtree, although it's bittersweet if bash.org really is going away… <3 https://archive.is/0y1yT https://archive.is/0y1yT is the archive of http://www.bash.org/?244321 http://www.bash.org/?244321
- romwell 3y agoFIY, your archive link is not working too at the moment. What do we do? Sigh I put on my robe and wizard hat https://web.archive.org/web/20190228221758/http://www.bash.org/?244321 https://web.archive.org/web/20190228221758/http://www.bash.o...
- RainaRelanah 3y agoWorks for me. Do note that archive.is blocks CloudFlare DNS.
- romwell 3y agoWorks for me now too, probably the server was not handling the load.
- philsnow 3y agoThis has bitten me before; now my pihole has this line in its dnsmasq configuration server=/archive.is/archive.ph/8.8.8.8 so that even if I'm using cloudflare dns for everything else, it will query 8.8.8.8 for those two domains
- qingcharles 3y agoThis hack needs to be pinned to the front of HN :)
- more_corn 3y agoSeriously. I’ve been hitting this for months.
- imgabe 3y agoHey, how did you get my Hacker News password?
- CoastalCoder 3y ago> Hey, how did you get my Hacker News password? Relax, they didn't. Your password is 3 characters longer.
- hunter2_ 3y agoIndeed, over the years a symbol gets added for length/complexity/rotation purposes.
- opello 3y agochef's kiss