• 1 Post
  • 59 Comments
Joined 2 years ago
cake
Cake day: June 14th, 2023

help-circle



  • So ultimately hashing an email address could be a good thing, but its a matter of half measures. Sure, you can perform a basic hash before putting it in the database, but if we assume hashing is performed to prevent it being read by an attacker, why bother unless youre doing it properly?

    Passwords, being more sensitive, should only be compared once finished being entered, so you can afford to run all the hashing, salting etc that is a requirement to keep the passwords safe.

    If you were going to hash the email to the same standard, it becomes harder to retrieve and display, so when the user wants to look at their profile in the ui, you have to run an intense cryptographic algorithm just to display the email. Or if you want to contact the customer, or any other use for their email. Hence, people dont bother.





  • I retook 6 classes and finished 2 years late. I’m regarded by my colleagues as a good person to work with and they think I’m good at what I do.

    Don’t let school define you, some people excel, others don’t. Also, working for money is completely different than intrinsically motivating yourself to complete assignments.

    I had mental health issues that I probably should have dealt with. If you feel like you’re struggling, talk to a counsellor or a therapist, mostly because the college or uni has to listen when they say you’re struggling. Also because they can look without judgement and tell you what you might be doing wrong with motivation and study habits. For me, I needed someone to remind me I mattered even if I didn’t do well. That’s just my 2c worth.



  • I’ve got no experience with it but at first glance it seems like a very positive direction for the project:

    Collaborate, not Compete

    We are proud of our community and closely interact with projects around it. If we build a platform feature that can be useful in an upstream project, we prefer to contribute it to that project, rather than keep it in the platform.

    You don’t hear that often enough these days, everyone seems to be siloing information.


  • I’m referencing this:

    Keely told GPT-4 to generate a Python script that compared – diff’ed, basically – the vulnerable and patched portions of code in the vulnerable Erlang/OPT SSH server.

    “Without the diff of the patch, GPT would not have come close to being able to write a working proof-of-concept for it,” Keely told The Register.

    It wrote a fuzzer before it was told to compare the diff and extrapolate the answer, implying it didn’t know how to get to a solution either.

    “So if you give it the neighbourhood of the building with the open door and a photo of the doorway that’s open, then drive it to the neighbourhood when it tries to go to the mall (it’s seen a lot of open doors there), it can trip and fall right before walking through the door.”