5 ms·
We should be displaying hashes in a color scheme determined by the hash (foreground/background colors for each character determined by a hash of the hash, salte
by __MatrixMan__ 1y ago
We should be displaying hashes in a color scheme determined by the hash (foreground/background colors for each character determined by a hash of the hash, salted by that character's index, adjusted to ensure sufficient contrast).
That way it's much harder to make one hash look like another.
- Spivak 1y agoNot sure why you're being downvoted, OpenSSH implemented randomart which gives you a little ascii "picture" of your key to make it easier for humans to validate. I have no idea if your scheme for producing keyart would work but it sounds like it would make a color "barcode".
- __MatrixMan__ 1y agoIf you ignored the characters and just focused on the background colors, yeah I suppose it would look like a barcode. But the way I envision it, each line on the barcode is a character, so it still copy/pastes into notepad as the original text, but it'll copy/paste into word as colored text with colored background.
- Macha 1y agoI have to say the openssh random art has never really helped for me - I see each individual example so infrequently and there's so little detail to remember that it may as well just be a hash for all the memorability it doesn't add
- 9dev 1y agoAs someone with red/green vision deficiency: if you do this, please don’t forget people like me are unable to distinguish many shades of colours, which would be very disadvantageous here!
- AaronAPU 1y agoIt’s not like it would hurt you for there to be supplementary info others can see but you can’t.
- macintux 1y agoAnd it's not like it would hurt the developers to be conscious of their choices.
- zarzavat 1y agoThere's actually nothing the developers can do about this particular issue other than to display all colors and allow colorblind people to see the colors that they can see.
- b112 1y agoFor the newly made up feature, which doesn't exist yet, but already has an issue? Simple. Instead of forcing colour, one could retain a no colour option maybe? Done. Solved. Everything should have this option. I personally have no colour vision issues, other than I find colour annoying in any output. There's a lot who prefer this too.
- deleted 1y ago[deleted]
- __MatrixMan__ 1y agoAgreed, although I would argue that maximal hash contrast should be default, and if people find they prefer less, they can turn it down. If you're the sort of person who would think about adjusting it to suit your sensitivity to this kind of attack, you're likely not the sort of person that the feature is trying to protect anyhow.
- mdaniel 1y agoTeam https://no-color.org/ https://no-color.org/ for life One will not be surprised to see that Chalk chooses its own path via the stunningly opaque FORCE_COLOR=0 and is all :fu: to people who suggest otherwise <https://github.com/chalk/chalk/issues/547#issuecomment-1126893160 https://github.com/chalk/chalk/issues/547#issuecomment-11268...> One will especially enjoy the "get bent" response because I discovered that one issue by, you know, searching the issues <https://github.com/chalk/chalk/issues?q=is%3Aissue%20NO_COLOR https://github.com/chalk/chalk/issues?q=is%3Aissue%20NO_COLO...>
- __MatrixMan__ 1y agoYou could still ignore the colors and just read the characters, like people do now, and you could still use whatever color cues you are sensitive to.