« first day (4896 days earlier)      last day (278 days later) » 

00:23
why do people even bother combining keys + passphrases if they could just use regular password for ssh connections
?
in both cases you just have a single barrier
 
3 hours later…
03:39
Sometimes this auction site that I frequent asks for password when I view my current biddings, I often enter a wrong password, the site shows error and notifies me that I had entered a wrong password. Then I click on the current bidding panel again, it shows me all my current biddings and allows me to upper my bids, despite the fact that I had entered the wrong password.
Technology - because you worth it!
 
2 hours later…
06:06
posted on March 12, 2024 by Herb Sutter

Scope. To talk about C++’s current safety problems and solutions well, I need to include the context of the broad landscape of security and safety threats facing all software. I chair the ISO C++ standards committee and I work for Microsoft, but these are my personal opinions and I hope they will invite more dialog … Continue reading C++ safety, in context →

 
7 hours later…
12:41
@LandonZeKepitelOfGreytBritn because leaving password auth open on an SSH connection is beyond stupid
that's just asking to be hacked
the point you're making is that as the place where you type in the password is different you re now more safe?
no, and if you think that's the difference between certificate and password auth then you should bonk yourself
with certificate auth the attacker lacks the private key, there is no reasonable way for them to attack the server because they can never get past the initial challenge
with password auth they can spam millions of attempts per second
my bad, had no idea certificates were involved when using keys unlike password auth
well for SSH there isn't a difference unless you're using GSSAPI
but the point remains the same, for certificate based auth you're effectively using RSA or ECDSA to make getting into the server much harder
 
4 hours later…
17:20
ACM needs to add a SIGKILL special interest group.
18:19
Welcome to the year 2054, JSON now supports comments
 
2 hours later…
20:21
@Mikhail literally over Douglas Crockford's body?

« first day (4896 days earlier)      last day (278 days later) »