bjorney

Yarn isn’t a JS runtime

They probably caught on when people started buying hundreds of xboxes to build supercomputing clusters

y’all need Jesus fiber

Or just… teach them? play movie.mkv isn’t rocket science.

Instructions on how to switch to HDMI 1 are currently taped to the back of my mom’s TV remote

If you’ve had chicken pox before and have had mysterious pain/tingling on an arm/leg on the same side of the body as those for the past few days it could be shingles

I just had it at 33 last week and it looked very similar to that when it first popped up

Giraffes in shambles

Fair - point still stands though - the application only has a single breakpoint defined at 600sp from a cursory glance, the lack of an ultra-wide specific layout is just because it hasn’t been implemented rather than a shortfall of GTK (though I’m not sure you would even want to make the message view wider, as it would impair readability)

That looks like it’s just wrapping a WebView, is it not?

It looks like the CSS is just capping the container class width at 1440px, which has nothing to do with GTK

OP said it was to notify you when an alarm went off, not when it ran out of batteries.

If the code doesn’t change, the resulting docker image will have the same hash, and a new image won’t be created

https://github.com/jackett/jackett/releases

Jackett is literally just releasing a new version every day

Especially because it’s to a newbie, who stands to benefit the most from using an OS with more user share and more available online resources.

That assumes that an adversary has control of the browser

No it doesn’t, if they intercept an encrypted password over HTTPS they can resend the request from their own browser to get access to your account

The big reason you don’t want to send passwords over https is that some organizations have custom certs setup

What is the problem with that? The password is secure and only shared between you and the site you are intending to communicate with. Even if you sent an encrypted password, they wrote the client side code used to generate it, so they can revert it back to its plaintext state server side anyways

It is better to just not send the password at all.

How would you verify it then?

If not sending plaintext passwords was best practice then why do no sites follow this? You are literally posting to a site (Lemmy) that sends plaintext passwords in its request bodies to log-in

Client side verification is just security by obscurity, which gains you very little.

If someone is capable of MITM attacking a user and fetching a password mid-transit to the server over HTTPS, they are surely capable of popping open devtools and reverse engineering your cryptographic code to either a) uncover the original password, or b) just using the encrypted credentials directly to authenticate with your server without ever having known the password in the first place

You are acting like someone checked off a “log passwords” box, as if that’s a thing that even exists

Someone configured a logger to write HTTP bodies and headers, not realizing they needed to build a custom handler to iterate through every body and header anonymizing any fields that may plausibly contain sensitive information. It’s something that literally every dev has done at some point before they knew better.

More, but not way more - they would be licensing window IoT, not a full blown OS, and they wouldn’t be paying OTC retail rates for it.

If you know the key is composed of English language words you can skip strings of letters like “ZRZP” and “TQK” and focus on sequences that actually occur in a dictionary

You don’t memorize RSA keys

No im saying if your password size is limited to a fixed number of characters, as is the case with RSA keys, words are substantially less secure

“can you string words to form a valid RSA key”

“Yes this is the most secure way to do it”

“No, it’s not when there is a fixed byte length”

-> where we are now

1. we are talking about RSA keys - you don’t memorize your RSA keys

2. if you rely on memorizing all your passwords, I assume that means you have ample password reuse, which is a million times worse than using a different less-secure password on every site