sjadoinqwoeihad

4 ms·

1.
by sjadoinqwoeihad 3y ago
You can't ratelimit someone you have not yet identified. Unless their username is also a password. But then you just have 2 passwords. And the ID password would have to be sufficiently high entropy to not be hit by bots.
2.
by sjadoinqwoeihad 3y ago
Keylogger would still get the TOTP code. Dump would include the TOTP secret. Why write only the password down if you still need password manager for the TOTP code? I think I mostly agree TOTP in password manager is useless, but it's no
3.
by sjadoinqwoeihad 3y ago
Software complexity is increasing. With the increased complexity many failure modes are not understood by developers. Thus those failures are not handled gracefully. This feels like a decline in quality. Depending on what you measure the qu
4.
by sjadoinqwoeihad 4y ago
> 0, 0, 1, 0, 2, 1, 0, 0, 1, 2, 0, 1, 0, 0 I never noticed this symmetry in fizzbuzz before.
5.
by sjadoinqwoeihad 4y ago
I checked my 5 year old repository of ~300 stars. It has a ~100 unique clones a month. So if the average was half of it then the 1 order of magnitude would be quite an accurate approximation. I think the biggest difference with a clone and
6.
by sjadoinqwoeihad 4y ago
Yes 100%. This reminds me of bees or fireflies. They have algorithms that individuals follow which can cause the collective to behave in a certain way. We should definitely create something like that. You can't rely on spoken signals,
7.
by sjadoinqwoeihad 4y ago
Cypress is anything but simple. It takes a lot of time to learn all the footguns and not write flaky tests.