xthexder

joined 1 year ago
[–] xthexder@l.sw0.com 8 points 1 month ago (1 children)

After reading that I'm still really confused who these cars were stolen from. From the sounds of things, the current owners are losing their newly bought vehicles only for them to get put back on a dealer lot, which is just insane.

Surely by now the original owners have already claimed insurance on their stolen vehicles? The police repossessing them from legal purchasers who were unaware just seems like it's making the whole situation worse.

[–] xthexder@l.sw0.com 4 points 1 month ago

Yeah, multiple languages or even putting an ê or something in an English password to mix things up. It makes perfect sense to allow.

It's a good thing they require each codepoint to be treated as one character for the length limit, since "🤔🤣" is 8 bytes on its own, but the unicode prefix is trivial to guess.

[–] xthexder@l.sw0.com 4 points 1 month ago

Storing credit card data has its own set of strict security rules that need to be followed. It's also the credit card company's problem, not yours, as long as you dispute any fraudulent charges early enough.

I'm coming at this from the perspective of a developer. A user can always use a longer password (and you should), but it's technically possible to make an 8 character password secure, thus the NIST recommend minimum.

[–] xthexder@l.sw0.com 5 points 1 month ago

Normally the term for this is headless rendering, but I think in this case it's more like head-only rendering 😆

[–] xthexder@l.sw0.com 2 points 1 month ago* (last edited 1 month ago) (2 children)

Newer password hashing algorithms have ways of combatting this. For example, argon2 will use a large amount of memory and CPU and can be tuned for execution time. So theoretically you could configure it to take 0.5 seconds per hash calculation and use 1 GB or more of ram. That's going to be extremely difficult to bruteforce 8 characters.

The trade-off is it will take a second or two to login each time, but if you've got some secondary pin system in place for frequent reauthentication, it can be a pretty good setup.

Another disadvantage is the algorithm effectively gets less secure the less powerful your local device is. Calculating that same 0.5s hash on a beefy server vs your phone could make it take way longer or even impossible without enough ram.

[–] xthexder@l.sw0.com 4 points 1 month ago (1 children)

And here I wrote an AutoHotKey script to type out my clipboard a character at a time so I can paste stuff into this remote desktop software I'm using that doesn't support paste...

It's kinda necessary when the server's unlock password is 256 characters long and completely random.

[–] xthexder@l.sw0.com 28 points 1 month ago (11 children)

Interesting that unicode support is suggested. Emoji passwords could be fun.

[–] xthexder@l.sw0.com 5 points 1 month ago (1 children)

I've been told in the past you shouldn't make public posts with your travel plans. You're broadcasting that thieves can break in to your house and clean it out without worrying when you'll be back.

Just tell your friends/family directly

[–] xthexder@l.sw0.com 8 points 1 month ago

I'd say "for now", but at least we've got the EU protecting us from that possibility.

[–] xthexder@l.sw0.com 6 points 1 month ago (1 children)

It takes less than 30 seconds to install uBlock Origin. It's the first thing I do on a new install after replacing Edge with Firefox

[–] xthexder@l.sw0.com 10 points 1 month ago (1 children)

Yeah, there's some key qualifiers in there

if you’ve got a good idea, and it’s a contribution

Identity theft is neither a good idea or a contribution to society

view more: ‹ prev next ›