madacol

27 ms·

271.
by madacol 7y ago
try { const { attribute1, attribute2 } = getObject() } catch () {} attribute1 // undefined How would you solve that?
272.
by madacol 7y ago
I think I found it. https://www.wikidata.org/wiki/Q21980377#P856 But it's not trivial to understand
273.
by madacol 7y ago
How does it work? I'm trying to find the referenced Wikidata entry about sci-hub, but when searching, I don't understand what I am reading.
274.
by madacol 7y ago
> Sometimes it means telling them something they knew unconsciously but had never put into words. In fact those may be the more valuable insights, because they tend to be more fundamental. I now know what I subconsciously already knew. I
275.
by madacol 7y ago
Very interesting solution!, I will do it someday! And since I only watch selected channels, I will find a way to automatically fetch new videos from channels' RSS feed.
276.
by madacol 7y ago
Many opinions, but little data. It's hard to assess anything under this circumstances.
277.
by madacol 7y ago
Maybe what you want are options like AnkiDroid does: https://lh3.googleusercontent.com/QFBCiyA_6WBKfr8Xoo1MqOrQw1... At the bottom there are 3 buttons that sort of means this: - repeat card more frequently - repeat ca
278.
by madacol 7y ago
Yeah, any way of increasing the cost factor , whether is PBKDF2 rounds, salt rounds in bcrypt, or just a pepper
279.
by madacol 7y ago
In the supposed scenario that the server sucks, and it stores directly whatever you sent them, no rounds, no salt, nothing, what you are left with, is whatever protection you did on the client side, so I'm thinking doing the rounds cli
280.
by madacol 7y ago
In the comments section of that link, I found interesting this thread that touches what I am suggesting: https://blog.cryptographyengineering.com/2018/10/19/lets-tal... Which ends up with one of the parties w
281.
by madacol 7y ago
I explained more specifically what I am suggesting here. https://news.ycombinator.com/item?id=22257502 > Avoid passwords altogether... I understand your point of view and you are right, securing passwords is hard. I only
282.
by madacol 7y ago
> Oh but there is, you can just try logging in with it (either for real or by running the login protocol on a dump/leak). Sure, but that leak must have been from the same source. Imagine you are a password-reuser, and you have reg
283.
by madacol 7y ago
> Modern password cracking rigs with multiple GPUs can try out billions of hashes a second. If you know the salt or blinding factor, you can often recover the password. Isn't that what the rounds protects from?
284.
by madacol 7y ago
@MattPalmer1086 Totally agree on the first 2 points > And it still doesn't mean that the original password can't be recovered if the password db is compromised. Why is that?
285.
by madacol 7y ago
I'm pretty sure there are lots more, that probably are even better But what I'm suggesting is that whatever it is, it should be integrated with the browser's, so that when I am typing my password in a special password-input-f
286.
by madacol 7y ago
Sure, it does not help in strengthening this particular server's authentication mechanism. But it does serves as a proof for the user, that no matter however the server is storing the password, it won't be linkable to other's
287.
by madacol 7y ago
That's Interesting!. I didn't thought it that way What I had in mind is this: Server stores H(H(pw || bFixedPub) || bFixedPriv) , bFixedPub , bFixedPriv Server sends bFixedPub Client sends H(pw || bFixedPub) bFixedPub a
288.
by madacol 7y ago
From the point of view of the server, the password is H(password || blinding factor) So treat it like a password, salt it, do X rounds, and stores/checks result
289.
by madacol 7y ago
Server should save the blinding factor along with the hash. (Maybe some sort of global blinding factor could work, and generate it deterministically?) Server saves more data, but has the benefit that the rounds is computed in the client, so
290.
by madacol 7y ago
I think there should be a protocol in browsers where input password fields are hashed along with a blinding factor that comes from servers. I think that protocol would solve lots of basic problems in password security. But the most importan
291.
by madacol 7y ago
404 response from link
292.
by madacol 7y ago
I haven't been able to open this site for days (Timeout error, thought it was down), until today that I decided to use tor
293.
Why Was Qasem Soleimani in Iraq?(politics.stackexchange.com)
2 points by madacol 7y ago|1 comments
294.
by madacol 7y ago
Why is this relevant if it's from DEC 2018?
295.
by madacol 7y ago
What's the problem with prettifying algorithms?
296.
I've been using “Megabyte” wrong all this time(en.wikipedia.org)
3 points by madacol 7y ago|0 comments
297.
by madacol 7y ago
The tooltip on top of the Image is just genius. "[After setting your car on fire] Listen, your car's temperature has changed before."
298.
by madacol 7y ago
https://xkcd.com/1732/
299.
by madacol 7y ago
"Humans today and tomorrow are mostly about curve fitting, not intelligence" That would still makes sense
300.
by madacol 7y ago
I think it should not replace the `length` property of an intentional array.

More ›