Sphere

joined 5 years ago
[–] Sphere@hexbear.net 44 points 2 years ago

"just 17% endorsed the sensible option of outright ethnic cleansing" -the New York Post

[–] Sphere@hexbear.net 27 points 2 years ago (31 children)

It’s a white savior novel, and the white savior doesn’t even succeed.

That doesn't make any sense. At this point I'm starting to think you're just determined to hate it for some reason.

[–] Sphere@hexbear.net 24 points 2 years ago (34 children)

Why on Earth would you think a novel about a Black man being wrongfully convicted and ultimately killed is an endorsement of passivity within the system, rather than a damning indictment of that system?

[–] Sphere@hexbear.net 25 points 2 years ago (37 children)

I think maybe you need to reconsider your interpretation of To Kill A Mockingbird.

[–] Sphere@hexbear.net 45 points 2 years ago (2 children)

This has made a lot of people very angry and been widely regarded as a bad move.

[–] Sphere@hexbear.net 6 points 2 years ago (1 children)

Was not aware of the latest efforts on MD5, in all honesty; I take back what I said before.

I agree with everything you said there 100% except the bit about SSO. SSO is great for people working in managed environments (I wish my workplace would make broader use of it, honestly), but expanding it to everyone as a whole creates some serious issues (putting everyone's eggs in the same basket is a security risk, and worse, having a centralized third party notified of every login request totally undermines user privacy).

[–] Sphere@hexbear.net 7 points 2 years ago* (last edited 2 years ago) (3 children)

Well, I used 1 trillion guesses a second here. 10 years ago I'd have used 10 billion. So length does matter. And 300 years drops to 1 year if a dedicated attacker is willing to spend a good bit more on hardware (which, in the era of cryptocurrency, could actually be worth it, even just for a criminal).

And yes, sites should use good hashing algorithms, but we users can't count on them doing so. Plus, even a technically-but-not-practically broken hashing algorithm isn't so broken as to be equivalent to plaintext storage (unless it's unsalted), so it's less about specific algorithm choices and more about overall design security.

Not saying passphrases are useless, but password managers are the better technological path, in my opinion, because they obviate the need to remember more than just one password, and allow to you skip typing in passwords too (in fact, a pw manager is better for passphrase users, because they they can still use memorable phrases but don't have to type them in all the time).

And as it happens, my master password for my pw manager was originally a 6-word passphrase, but has since been changed to a 20-character randomly-generated password, because it's a ton easier to type, particularly on mobile.

[–] Sphere@hexbear.net 10 points 2 years ago* (last edited 2 years ago) (5 children)

A randomly-generated password can be a lot shorter than an equivalent-strength passphrase, actually:

If you have a dictionary with 25,000 words in it, and you randomly select 5 of them, your passphrase will have a strength of about 73 bits of entropy, which is decent (but actually less than the NIST recommendation of 80 bits, as it happens; to get there, you'd need 6 words).

A similar-strength randomly-generated password consisting of letters (upper- and lower-case), numbers, and a selection of 10 possible symbol characters (so, a total spread of 26 + 26 + 10 + 10 = 72 possible characters) would only need to be 12 characters long (and would have a strength of about 74 bits of entropy--13 characters would top 80 bits).

The passphrase would take over 300 years to brute-force at 1 trillion guesses per second, but the extra bit of entropy in the 12-character password means it would take 600 years to guess that one at the same rate.

[–] Sphere@hexbear.net 6 points 2 years ago

This is a pre-Dobbs poll, for one, and for two, Dobbs and its aftermath proved quite clearly that theoretical and actual political preferences can diverge rather sharply. I wouldn't assume these numbers are accurate anymore, nor that they really show who would and wouldn't support specific policies even as of the poll date (it's one thing to support a policy to a pollster and something else altogether to be ok seeing your relatives' and friends' lives threatened by that same policy).

[–] Sphere@hexbear.net 6 points 2 years ago

It's fake. BrandoSando surely doesn't have the best political takes on most issues, but this take is not one of his.

[–] Sphere@hexbear.net 6 points 2 years ago

it's unreal

The title even admits it!

[–] Sphere@hexbear.net 12 points 2 years ago* (last edited 2 years ago)
view more: ‹ prev next ›