Client side verification is just security by obscurity, which gains you very little.
If someone is capable of MITM attacking a user and fetching a password mid-transit to the server over HTTPS, they are surely capable of popping open devtools and reverse engineering your cryptographic code to either a) uncover the original password, or b) just using the encrypted credentials directly to authenticate with your server without ever having known the password in the first place
deleted by creator
You are acting like someone checked off a “log passwords” box, as if that’s a thing that even exists
Someone configured a logger to write HTTP bodies and headers, not realizing they needed to build a custom handler to iterate through every body and header anonymizing any fields that may plausibly contain sensitive information. It’s something that literally every dev has done at some point before they knew better.
Pagers operate at a lower broadcast frequency than cell phones. Longer wavelengths (low frequency) are less impeded by walls and interference.
This is only true for steam keys sold on other platforms afaik
It’s not uncommon to see certain sites to only work on chromium because the dev used the filesystem APIs that don’t exist on FF
Yes but if it’s first instinct is “go left” on 1-2, it’s pretty apparent the reward function could use some tuning
COVID has long lasting effects across your entire body, it impacts your immune and cardiovascular systems for years after you get it.
Risks of heart attack, stroke, etc are increased 2.5x in the year after infection, increasing exponentially with the number of times you have been infected. In fact, the risk of pretty much ANY health problem skyrockets following a COVID infection.
You gotta donate to planned parenthood for every dollar spent there. It’s like buying carbon offsets, but for sandwiches. /s
More, but not way more - they would be licensing window IoT, not a full blown OS, and they wouldn’t be paying OTC retail rates for it.
deleted by creator
I haven’t used dual shock so I can’t speak to that, but as far as Xbox 1/S controllers, there is no 1st party support - literally all the drivers are from some non-MS affiliated GitHub page. 360 controllers required the xpad driver as well - that isn’t 1st party support. Yes they work out of the box with steam if you are using a wired connection, but that’s because it’s going through steaminput (not 1st party either), and making the controls of the submarine dependent on being launched through steam is even more absurd. Gen 2 series 1/S controllers didn’t work via Bluetooth for a long time after they (silently) launched on most LTS Linux OSs due to the kernel missing requisite BLE functionality
That’s only assuming the sub was running windows, where Xbox controllers work out of the box. On Linux there are no first party drivers, and Bluetooth support on the 1/S controllers simply didn’t exist at the time this happened. If it was an embedded system there would be no support whatsoever.
https://www.theverge.com/2017/9/19/16333376/us-navy-military-xbox-360-controller
US Army used to spend $38,000 per controller until they found out Xbox controllers were better
For what?
lol. Did this in my old building - the dryer was on an improperly rated circuit and the breaker would trip half the time, eating my money and leaving wet clothes.
It was one of the old, “insert coin, push metal chute in” types. Turns out you could bend a coat hanger and fish it through a hole in the back to engage the lever that the push-mechanism was supposed to engage. Showed everyone in the building.
The landlord came by the building a month later and asked why there was no money in the machines, I told him “we all started going to the laundromat down the street because it was cheaper”
AI isn’t supposed to be creative, it’s isn’t even capable of that. It’s meant to min/max it’s evaluation criterion against a test dataset
It does this by regurgitating the training data associated with a given input as closely as possible
If you know the key is composed of English language words you can skip strings of letters like “ZRZP” and “TQK” and focus on sequences that actually occur in a dictionary
You don’t memorize RSA keys
No it doesn’t, if they intercept an encrypted password over HTTPS they can resend the request from their own browser to get access to your account
What is the problem with that? The password is secure and only shared between you and the site you are intending to communicate with. Even if you sent an encrypted password, they wrote the client side code used to generate it, so they can revert it back to its plaintext state server side anyways
How would you verify it then?
If not sending plaintext passwords was best practice then why do no sites follow this? You are literally posting to a site (Lemmy) that sends plaintext passwords in its request bodies to log-in