01·
1 year agoIt’s a good thing your opinion makes no difference then isn’t it.
- 8 Posts
- 23 Comments
Joined 1 year ago
Cake day: July 2nd, 2023
You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.
Yes. I agree 100% with the things I can and I defer to your experience where I can’t. I used to write proprietary networking protocols 20 years ago and that’s the knowledge and experience I’m leaning on.
As a matter of practice we would ensure to process passwords by encrypting the datasteam directly from the input, and they were never unencrypted in handling, so as to protect against various system and browser vulnerabilities. It would be a big deal to have them accessible in plaintext beyond the user client, not to mention accessible and processable by email generation methods and insecure email protocols.
25, I used to write proprietary networking protocols.
The front end to backend traffic should be encrypted, hashing occurs on the backend. The backend should never have access to a variable with a plaintext password.
I’m going to have to stop replying because I don’t have the time to run every individual through infosec 101.
You have the text input feed directly into the encryption layer without an intermediary variable. The plaintext data should never be passable to an accessible variable which it must be to send the plaintext password in the email because it’s not an asynchronous process.
I’m surprised so many people are getting hung up on basic infosec.
Stored in memory is still stored. It’s still unencrypted during data processing. Still bad practice and a security vulnerability at best. Email isn’t E2E encrypted.
It sends the user generated password, not an auto generated one.
0·1 year agoNo, I’m appealing to the reality of the situation because your willful ignorance has no bearing on it.
Yes, having an obvious mental handicap makes you stand out.
I always loathed that movie with everything in me, but I think it’s because I saw it as meaning to entertain rather than to warn.
If you haven’t you should watch ‘Don’t Look Up’, you will loath it for the exact opposite reason. It does such a good job of warning that it loses most of it’s entertainment value and leaves you feeling nihilistic.
He’s a wannabe Steve Jobs who has chased his own one letter legacy for 30 years, pathetic.
0·1 year agoDeSantis or Walt?
Bleu, just the way I like it, never tried horse but for beef the saying goes:
Knock it’s horns off, wipe it’s bum, and twice over a candle.
If I slap you there’s a non-zero chance Steve Job’s cock falls out of your mouth.
Elon Musk is a wannabe Steve Jobs, it all makes sense.
I’m a meat eater, I’m also a chef for a vegan ready-meal company, this is funny, grow a sense of humour, it can be rotated in when your lentils come to fruit.
English is hard, but can be figured out through tough thorough thought though.
You encrypt the datastream from the text input on the client side before storing it in a variable. It’s not rocket science. I did this shit 20 years ago. Letting a plaintext password leave the user client is fucking stupid.