tubbyjr

6 ms·

31.
by tubbyjr 6y ago
my gf can omit last x chars for hers and it's still accepted, can't recall what x was. Banks are so funny
32.
by tubbyjr 6y ago
doesnt paypal limit you to 20, and some banks i have to 12 characters...
33.
by tubbyjr 6y ago
No website being silly enough to store in plaintext, is silly untoitself https://www.upguard.com/blog/biggest-data-breaches plenty of cases where it happens... and plenty more of viably crackable breaches
34.
by tubbyjr 6y ago
Yeah... but some store their 2FA backup codes in said password managers, effectively turning them into the ultimate account breach honeypots.
35.
by tubbyjr 6y ago
https://app.srspass.com is a DPM I found that gives you complete control of the output
36.
by tubbyjr 6y ago
I really like the premise, and already use containers as ingredient in my isolation techniques, however, subuser development didn't seem particularly active, is it just because it's considered in a feature complete state?
37.
by tubbyjr 6y ago
ty, great post other than that little issue
38.
by tubbyjr 6y ago
Well yes, but actually no (0.5 + (2x0.25)x(2x0.25)) != 62.5% Your math there doesn't add up... quite literally
39.
by tubbyjr 6y ago
Literally instead of having to hire potentially dozens of software engineers to reinvent the wheel, they are able to use open-source software, and this altruism is peanuts compared to what the former would cost.
40.
by tubbyjr 6y ago
hope to do the same myself some day! And really hope businesses who do benefit and have the means, also support.
41.
by tubbyjr 6y ago
They're brilliant at finding this stuff, sure, but incompetent when it comes to business acumen and valuing their work. Usually. Those that have some semblance of the latter, have received in the six figures from singular bounties. I h
42.
by tubbyjr 6y ago
i have ytdl bound to some macros on my browser, so i can stream videos outside of the browser for accessibility reasons
43.
by tubbyjr 6y ago
This app isn't for a security conscious person... they won't use it or pay for it, so I recommend them targetting the snapchat normies who'll get pwnt one way or another
44.
by tubbyjr 6y ago
Same, I want Space Force Grade, in this day and age!
45.
by tubbyjr 6y ago
Still doesn't answer the open-source question, everything client-side should be open-source and showcase proper crypto implementations and assurance that credentials aren't just sent in plaintext to your servers.
46.
by tubbyjr 6y ago
Yeah, basically any modern KDF not being misused trumps this... I feel bad for the people that worked on this, since it definitely required a lot of effort, but I don't see any widespread adoption for it, since most engineers won'
47.
by tubbyjr 6y ago
The architecture is convoluted and they couldn't even be arsed to read or understand the crypto they were using, so if they failed at that implementation why believe they didn't leave holes in such a complex architecture setup. I&