ntpl

4 ms·

1. 1.▲
   by ntpl 5y ago

   While wealth (or rather, being "wealthy") is absolutely a success, it is not the only way to succeed nor is its definition "not being poor". As such, I'd like to believe people at places like /r/povertyf
2. 2.▲
   by ntpl 6y ago

   Simply by grouping clients into rooms by their public IP. > You can be discovered by everyone on this network Assumption here being that the devices on the same network are all NAT'd behind the same public IP, which usually holds
3. 3.▲
   by ntpl 9y ago

   To be fair, Recurecur said: > New reactor designs completely eliminate the possibility of meltdown . not necessarily of any failure, to which they were willing to accept that things can fail in novel ways, just not meltdowns in their
4. 4.▲
   by ntpl 12y ago

   Taking unnecessarily long to handle a lookup request might leave server very vulnerable to DDoS attacks leveraging this "account recovery" option, I think. Even worse, an invalid email would take the longest possible time, every t
5. 5.▲
   by ntpl 12y ago

   Right, which is why I said > figuring out what the original email should be hard (if not impossibly hard, depending on how they hash it) I mean, passwords are way more sensitive than emails, especially given that many people re-use them.
6. 6.▲
   by ntpl 12y ago

   It's one thing to decide not to store emails (sure, why not?) but account recovery shouldn't even require one to store email addresses. Check the the email provided by user via the recovery form against a hash of the email saved d