• 1 Post
  • 2.22K Comments
Joined 2 years ago
cake
Cake day: July 3rd, 2023

help-circle


  • Not included in this answer and I’m not fully qualified to talk about: salting.

    If you knew the hashing algorithm, you could precompute hashes of all the common passwords. Then when you get steal the hashed password data, it’s a lot faster to check if any of them are in your list. You can likely find that kind of list online to download.

    One defense against this is “salting”. The site adds some text to your password before hashing it. So if your password is extremely common, like “password1!”, with the added salt the hash on this site will be different. Like maybe it adds the user’s uuid, so what gets hashed is “password1!-abcd-123-pretend-this-is-a-uuid”. The user doesn’t need to know.

    Another benefit is that now two passwords that both are “password1!” have different hashes.

    I’m not an expert by any means so please someone correct me if anything was wrong there.



  • I don’t have the means or motivation to do research now from the couch, so I’ll concede you may be correct. However, I think it might be even safer to take those same billions of dollars and invest them in mass transit and other infrastructure changes. That would mean fewer car accidents, less pollution, nicer spaces, healthier people, healthier economies, etc. private car ownership cannot be the long term solution. If it’s not an outright dead end, it’s certainly a side street instead of high speed rail (if you’ll pardon a strained metaphor).








  • Some states in the US are marginally better than others. I think they’re all bad, by any reasonable metric. I think Texas has no guaranteed paid time off. New York gives you one hour off for every thirty hours worked, to a maximum of 56/year.

    It’s stupid, cruel, and self destructive.

    If someone was sick, told to come in anyway, and they held their boss down and vomited on their face, and I was on the jury, I would nullify.