4 ms·
That's because of the HN security. It prints all passwords as stars. You can try putting your HN password in a comment, it would be visible only by you, and th
by miroljub 3y ago
That's because of the HN security. It prints all passwords as stars.
You can try putting your HN password in a comment, it would be visible only by you, and the others will not see it.
- meepmorp 3y agohunter1
- markx2 3y agoClose. hunter2
- meepmorp 3y agoWait, how did you see my password?
- test1235 3y agowe see it as asterisks ... you see it as hunter2 and not **** 'cos it's your password
- theginger 3y agoWhat? I just see stars
- CoastalCoder 3y agoGet to a doctor!
- pigeons 3y agoWhat? I just see stars Have you seen a doctor? No, just stars
- dllthomas 3y agoReady when you are, Raul.
- notarget137 3y agoHow about ****** Did it work?
- tomrod 3y agoOh wow, you kiss your mother with that mouth?
- actionfromafar 3y agoI use my fingers to type passwords and ehh...
- bayindirh 3y agoI guess you're right. My HN password is *****. When I edit, I can see it, but when I save the comment, it becomes starred. It even randomizes the length every time I save. Brilliant!
- GTP 3y agoBut this also means that they know your plaintext password, meaning that they're saving passwords in plaintext. Given that this is mostly a technical community, it's much more the risk of keeping a database of plaintext passwords than the benefit of being able to obfuscate passwords in comments. EDIT: thanks to another commenter, I understood that what's happening in the above comments is just a meme and HN isn't storing plaintext passwords. Sorry for the misunderstanding.
- Volundr 3y agoIn case you're unclear why your being down voted, comment chain is a riff on one of the more famous bash.org quotes: https://knowyourmeme.com/memes/hunter2 https://knowyourmeme.com/memes/hunter2. HN does not actually know your password or hide it in comments.
- Duanemclemore 3y ago(whistles softly as he changes password from a string of twelve asterisks to ******)
- mewpmewp2 3y ago> HN does not actually know your password or hide it in comments. Does it not know? What if I post it in this comment? My password is *****.
- svnt 3y agoWhat actually happens is more complex: when you type a *******, HN tries to log in once for every string in your *******, and then when it succeeds it goes back and replaces that string with a randomized length of asterisks.
- nirui 3y agoThis has to be a joke. The only way it can be realistically implemented involves the storage of clear-text user password to enable string replacement during comment submission. Either that or converting user comment to a prefix/suffix table (or something similar) and then hash each item to search for a match. Both option is ridiculously unnecessary. Anyway, my HN password is ****. I bet it don't work.
- thomaslord 3y agoFortunately with modern serverless architecture, it's possible to make this performant! Just split up each comment into words and dispatch each word to a queue where AWS Lambda workers can check the words against the user's password hash. It might cost $20 to process each comment, but at least it'll autoscale to handle any comment volume you throw at it!
- Affric 3y agoCan passwords include spaces?
- deleted 3y ago[deleted]