TheCaconym [any]

  • 0 Posts
  • 11 Comments
Joined 4 years ago
cake
Cake day: September 19th, 2020

help-circle
  • TheCaconym [any]@hexbear.nettoLemmy@lemmy.mlLemmy 0.19 Breaking Changes
    link
    fedilink
    English
    arrow-up
    17
    arrow-down
    2
    ·
    edit-2
    9 months ago

    While SHA1 might be considered problematic security-wise in terms of collision (using it for certs today would be very bad, for example), it is not problematic in terms of preimage attacks (even MD5 isn’t broken that way IIRC), which is what truly matters in the context of 2FA / TOTPs

    As for “why not SHA256”, compatibility



  • I mean, I can copy Baldur’s Gate on a PC where there’s no Steam at all and play it just fine, because the game itself doesn’t have any restrictions

    I don’t think so, no. You can do that with the gog version. With the steam version it’ll try to launch / connect to the local installed steam at startup, and fails if it cannot do so. You’d need to install a steam emulator like goldberg for it to work.

    This is the case with most games (there are a few exceptions) on steam, even those that don’t enforce “strong” DRM. They want steam running. This is, by itself, a completely unacceptable form of DRM.


  • Exactly right. I keep reading this and I never know how to respond, it really isn’t that hard and it’s worth it. I’ve posted this before here but personally I go with a postfix+mariadb+dovecot+postfixadmin+spamassassin+opendkim stack; it’s extremely easy to set up (if you read the docs) and it has suited me perfectly. Once it’s configured it’s rock solid

    Beyond the obvious privacy advantages, being able to generate an email alias at any time (to the point where you can create one dedicated for each shitty thing you subscribe to) is also very useful for spam protection / infinite free trials and the like. Also aliases redirecting towards many recipients for easy organizing / mailing-list-like behaviour