I am an academic and outdoors enthusiast who supports the free and open exchange of information. We need to stop the trend of social media companies closing data access to researchers, open source developers, and the general community.

  • 2 Posts
  • 18 Comments
Joined 1 year ago
cake
Cake day: June 11th, 2023

help-circle







  • When you are filling out the web form with your password it’s stored plain text in the web browser and accessible via JavaScript. At that point, a JavaScript function checks the requirements like length and then does the salting/hashing/etc and sends the result to the server.

    You could probably come up with a convoluted scheme to check requirements server side, but it would weaken the strength of the hash so I doubt anyone does it this way. The down side of the client side checking is that a tenacious user could bypass the password requirements by modifying the JavaScript. But they could also just choose a dumb password within the requirements so it doesn’t matter much… “h4xor!h4xor!h4xor!” Fits most password requirements I have seen but is probably tried pretty quickly by password crackers.


  • Perhaps they validate the passwords client side before hashing. The user could bypass the restrictions pretty easily by modifying the JavaScript of the website, but the password would not be transmitted un-hashed.

    It is worth pointing out that nearly any password restriction like this can be made ineffective by the user anyway. Most people who are asked to put a special character in the password just add a ! to the end. I think length is still a good validation though and it runs into the same issue @randombullet@lemmy.world is asking about






  • No worries, thanks for the response!

    Interesting answer, scanning through the Wikipedia article on kiki/bouba it makes sense that we don’t really have solid evidence that it isn’t a learned trait. It may be hard to get a population of people who developed language independently of all other humans ever and see if they maintain the strong correlation with naming kiki and bouba.

    So I guess that brings up another question I have kinda wondered about. What is the most “isolated” spoken language on the planet? By that, I mean the language that evolved most independently of other spoken languages. Is there anything interesting that can be learned by comparing such a language to the European languages that are dominant among the global population?



  • Spam detectors are pretty opaque by their nature. In contrast, karma is pretty easy to understand: “x number of people upvoted comments or posts from this user”. This lets people understand a score even if they don’t agree. If a karma replacement behaved like a spam detector, it would probably just annoy people.

    Sporting brackets may be a better analogy. They are developed with statistics in mind but are understandable to the average sports fan. I think a karma replacement should have similar properties.