Dan
Jun 25, 2021 23:54
but /shrug
Dan
Jun 25, 2021 23:54
i think the current name is fine when coupled with a description
Dan
Jun 25, 2021 23:54
room topic changed to Dan & lucifers sister: Response to stackoverflow.com/questions/68137934/… (no tags)
Dan
Jun 25, 2021 23:53
I named it this because lucifers sister is the name of the OP :')
Dan
Jun 25, 2021 23:53
This isn't a default name
Dan
Jun 25, 2021 23:52
hoping OP drops by and reads what's up rather than being discouraged by the pretty bad reception they got
Dan
Jun 25, 2021 23:52
Dan
Jun 25, 2021 23:51
it's a new room to respond to a question yeah
Dan
Jun 25, 2021 23:48
honestly, I would recommend using a username and password combination instead, like most websites do
Dan
Jun 25, 2021 23:47
Furthermore, WindowsIdentity.GetCurrent() isn't appropriate for use in distrbuted systems - the value of it depends on the machine running it and it's only as secure as the machine that's running the code.
Dan
Jun 25, 2021 23:46
As for being able to view traffic over HTTP, you should use HTTPS and certificate pinning to ensure that 1) the traffic is encrypted and 2) only someone with a certificate that matches your public key is able to decrypt the traffic, although you should be aware these come with problems of their own
Dan
Jun 25, 2021 23:45
you would solve this by generating a long string using a crytogrpahic function specifically designed to be resistant to brute force attacks, such as SHA256. this sorts the guessability problem.
Dan
Jun 25, 2021 23:45
2) you're sending traffic over HTTP, which means anyone can intercept the traffic between client and server to 'see' the secret.
Dan
Jun 25, 2021 23:44
1) unless HWIDs are GUIDs (very big numbers that are hard to guess), they are prone to being guessed by computers. and since the attacker would only need to guess one to have a successful attack (ie to gain access), this makes GUIDs not a suitable solution on their own for securing access to a server
Dan
Jun 25, 2021 23:44
You want to modify your code such that the client sends its own secret (HWID) to the server and the server tells the client whether or not it has been accepted. You shouldn't expose the list of acceptable HWIDs to anyone. However:
Dan
Jun 25, 2021 23:43
1. someone could just circumvent using your client and access the website directly (since the website doesnt verify the information) and 2. anyone can visit the website and see the permissible hwids and just copy one to gain access.
Dan
Jun 25, 2021 23:42
the client is doing the authentication check - the code segment you've linked indicates the client downloads a document, then checks that document to determine if its HWID is within the document - this has a few problems
Dan
Jun 25, 2021 23:42
So there are a few problems with your approach:
 

JavaScript

Topic: Anything JavaScript, ECMAScript including Node, React, ...
Jun 30, 2016 08:57
so he could use doxygen but given that he is averse to installing jsdoc, I hate to see how he would cope with doxygen ^^
Jun 30, 2016 08:56
Yes, my understanding is that he wants documentation generated "for free"
Jun 30, 2016 08:56
I meant to say that the jsdoc format is understood by quite a few alternative generators (not just jsdoc), so you don't necessarily have to generate XML documentation from jsdoc comments
Jun 30, 2016 08:56
@OliverSalzburg eh, I phrased myself poorly.
Jun 30, 2016 08:55
jsdoc itself though yeah only generates web pages
Jun 30, 2016 08:54
they can be consumed by other tools to create webpages or markdown or what have you
Jun 30, 2016 08:54
@OliverSalzburg jsdoc/esdoc are just standards
Jun 30, 2016 08:53
chat is not your tutorial
Jun 30, 2016 08:53
you're coming across to me as some kind of help vampire
Jun 30, 2016 08:53
seriously, go read a few tutorials - it sounds like you just lack comprehension in the entire of the node field
Jun 30, 2016 08:53
So, yeah, you can criticise software if you're actually trying
Jun 30, 2016 08:53
And you're not bothering to actually search for the answers yourself
Jun 30, 2016 08:52
Because you're using it wrong
Jun 30, 2016 08:52
You've criticised every piece of software you've used so far (npm, jsdoc, esdoc) etc
Jun 30, 2016 08:52
Perhaps you should try actually searching for it instead of complaining you can't find any results. ¯\_(ツ)_/¯
Jun 30, 2016 08:51
It's not my software, it was the first result of google after I searched jsdoc online.
Jun 30, 2016 08:47
BTW. You CAN do it online. jsdoc.sanstv.ru
Jun 30, 2016 08:47
no need to reinstall it.
Jun 30, 2016 08:47
congrats, now you have jsdoc on your command line available for all future projects
Jun 30, 2016 08:46
npm i jsdoc -g
2
Jun 30, 2016 08:46
@Mathematics That's a very unique case, you'd still need to write the documentation yourself if you wanted it to be meaningful, and frankly jsdoc does not take that long to install. At all. Stop being lazy.
Jun 30, 2016 08:45
I mean sure you might be able to make a tool that looked at a given git repository on github to generate docs but what would the usecase be for that instead of just doing git fetch && jsdoc?
Jun 30, 2016 08:45
They're not "online" because they need to look at a codebase to generate documentation.
Jun 30, 2016 08:44
There's jsdoc, esdoc, tsdoc...
Jun 30, 2016 08:44
@Mathematics I have no idea what you're on about.
Jun 30, 2016 08:44
@bitten possibly?
Jun 30, 2016 08:40
Actually better yet, just don't use admin command prompt unless you come across a situation where you cannot do what you want without it.
Jun 30, 2016 08:40
running command prompt in admin mode when doing npm i is equivalent to saying sudo npm i ...
Jun 30, 2016 08:39
you're installing arbitrary code from the internet.
Jun 30, 2016 08:39
BTW @Mathematics don't run command prompt as admin when using node.
Jun 30, 2016 08:36
also you can do rmdir node_modules which will have the same effect
Jun 30, 2016 08:35
yes, you can do that