• 2 Posts
  • 165 Comments
Joined 1 year ago
cake
Cake day: July 31st, 2023

help-circle






  • He’s not a good person but some of the things he says are things that almost every young man resonates with. Feeling worthless, being lonely, wanting something to strive for, having no purpose, the feeling that life is unfair to you but you can’t complain, or social stuff is hard.

    It’s not the solutions he proposed that made him popular, but the problems he raised.

    Now let’s be clear here, he’s a slimy criminal with a ton of different schemes running concurrently, but at face value we still haven’t found the time to address the problems he raised. The void he leaves is exploitable unless we get someone righteous who takes his place to inspire young men. And no, I don’t think there’s role models right now that can take his place, at least not with that reach or that charisma.




  • You know what, there’s a small chance they would if they knew. But let’s say the Pentagon stopped all silos and kept it hush. Russia and China would never know whether they stopped or where remaining ones would be.

    It’s not the weapons itself that protect the USA but solely the fact they are probably somewhere and they know how to trigger them.

    This is overkill. In every aspect. Need, justification, budget, maintenance. The definition of a US defense department toy. It’s a flex. But it’s a covert flex, which is the definition of stupid. We’re not talking trap track but government decisions and that boggles my mind.









  • That has to do with how hashes work.

    Hash is if you want someone to be able to check if he’s got the right password but not able to know what it actually says.

    Imagine my password is “shark”. Let’s say I use a hash algorithm so that it becomes “2gtth5”. If I log in. I enter my password. My browser* uses the same algorithm, so the text I entered is “2gtth5” now. The server looks up my hashed password, checks if it’s the same and then it lets me log in. The benefit is, the server doesn’t know my actual password, it only knows that the hash is “2gtth5”. This means if the database gets compromised, people only see “2gtth5” but not my actual password. And because it’s a hash, they don’t know how to get back from “2gtth5” to “shark” and therefore my password is not compromised.

    Now imagine if I knew the hashing algorithm used and I have a list of possible passwords. There might be “shark” in there. So I can take the password list, make a hash out of every password and see if it matches. Because my password is in there, the hash for “shark” will match the hash “2gtth5” in the compromised database and they now know my actual password. This is a far bigger problem.

    Everytime you see that someone “hacked” a database and password hashes got compromised, this is what happens. They use rock you and a few other lists to see if they can “crack” the hashes (this just means checking the hashes and seeing if one of the password from the list matches).

    This is specifically what those lists are for. They are used by bad actors to make use of the hashed passwords they stole.

    Glossary:

    • hash: representation of some text
    • cracking a hash: trying to get the actual text from a hash
    • salted hash: a hash with fake characters in there
    • algorithm: basically the way your program works, either the code or a scientific representation of the way it works

    *Someone in the comments corrected me on this. The server does the hashing not the browser.