- 1 Post
- 31 Comments
That link doesn’t work for me but [email protected] does. I don’t know how Lemmy’s community names work, but this one seems to have “web1” for the URL even though its name is “theoldweb”.
Pink can also be described as a reddish hue with high brightness and low saturation. But saturation is a matter of how strongly one frequency is emphasized compared to other frequencies. So colors with low saturation contain mixtures of frequencies, but each point in the rainbow, when there’s no other source of light present, is only a single frequency. This is why the rainbow doesn’t contain any desaturated colors like pink. Brown, I admit, can be just dark orange.
Yes, my understanding is that the pepper is usually supplied from another source (not stored in the database), specifically to make it more difficult for anyone who steals the database to crack the password hashes. It would mean that if you stole this hypothetical db with two-letter subsets of the password in it, and got the salts too, you’d still be cracking the hash of a much longer string. But if you figured out that one string (pretty hard to do), you’d have the whole lot.
You may be right. I was thinking that the strings would be padded with a random pepper and a unique salt though, before hashing. So the string “sw” might become “swrP86#UlRA64%KGjBICfyO!6” with the unique salt and then “awrP86#UlRA64%KGjBICfyO!6L6ZCf3#T##ssUPjfOMXL^YGZ" with pepper added before hashing, while the string “od” might become "odjaSmh&1$n1##1#400AjQE10kXL6ZCf3#T##ssUPjfOMXL^YGZ” (salt shown in italics). Then you’d be trying to crack these long strings rather than just two-character strings. Of course, if someone steals the DB they would have the unique salt, which would reduce the difficulty to that of guessing two characters plus the pepper (assuming the pepper is stored securely elsewhere), but that’s still quite difficult.
Unless they hash and store various combinations of characters in addition to, or instead of, the whole password. I haven’t heard of anyone doing this. If you were to pad them with a unique salt and a pepper before hashing each combination, you could end up with something more secure than just hashing the whole password Edit: I was wrong it seems; you’d still end up with something insecure. But hashing the whole password, if done properly, is already secure enough so this would seem like needless complication unless there’s some unusual concern about the password being intercepted in transit, and in that case you’d have other problems anyway.
I have heard of this thing of asking for selected characters of a static second authentication factor (e.g. a PIN), but not of a password itself. And now that we have proper 2FA systems I haven’t seen anything like that in a while.
The script gets all of the publicly federated communities and “makes them known” to your local instance and then subscribes to them. “All” should be populated with activity from around the Lemmyverse.
Doesn’t that significantly increase the load on your instance and, if many instances use it, all instances? This system isn’t designed with the idea that each instance receives everything from every other instance.
It might be better to run this on a single dedicated site which people can come to to browse. If you could learn where each user had their account, you could send their upvotes, downvotes and comments to that instance.
Fascist movements and cult leaders long ago figured out the secret to engagement: keep people feeling threatened, play on their insecurities, blame others for all the problems in people’s lives, use fear and hatred to cut them off from people outside the movement, make them feel like they have found a bunch of new friends, etc. Machine learning systems for optimizing engagement are dealing with the same human psychology, so they discover the same tricks to maximize engagement. Naturally, this leads to YouTube recommendations directing users towards fascist and cult content.
They could be doing this already, for all we know. We don’t know who owns all those little instances out there. Large corporations or government surveillance just need to set up a discreetly named instance or two and start subscribing, and they’ll get all the data they want. (In fact, could that be part of the reason for the explosion in silent bot accounts?)
You may be right that I overstated that. In 2013 there was a study finding it had not changed this rapidly in 65 million years, though since then there have been studies suggesting there may have been incidents of very rapid change in the distant past. Here are some relevant links I found:
Studies of ice cores suggest climate change today is more rapid than in the past 800,000 years
The same ice core data, with sources
Climate change occurring ten times faster than at any time in past 65 million years
Today’s Climate Change Proves Much Faster Than Changes in Past 65 Million Years
Abrupt climate changes in Earth history
Rates of ancient climate change may be underestimated
Rapid climate change: lessons from the recent geological past
Technology these days tends all to have the same flavour, because the tech bros behind it tend unreflectively to share the same kind of outlook on the world. Sometimes engineers can be overly confident that they are dealing with the most important things, but the unexamined outlooks and philosophies by which they live end up shaping our world through the technologies they implement.
As someone working in tech who studied arts and continues to be active in the arts, the experiences in life that have transformed how I perceive and understand the world have never come from technology, but often from arts. Arts can change your perceptions, can open you up to ways of perceiving that you didn’t know were there, and can reveal that your assumptions about the world were just assumptions.
That’s not to say that technology can’t be innovative and world-changing. A number of technologies around today have the potential to transform society, but the ways in which they can transform it will be dictated not just by the technologies but by the people who realize them. I don’t think it has always been the case that technologists are uninterested in the arts, but I suspect it’s no coincidence that today’s crop of tech leaders are both uninterested in the arts and conspicuously blinkered in their vision.
Yes, that is good, though there seems to be a bug in version 0.18 which means that when you click through the Subscribe button doesn’t show up (just the word “Subscribe” where it should be), so you end up having to search for the community anyway to subscribe. Once that bug is fixed though it will be nice and convenient.
Edit: I found another workaround: If when you first click through to the community the Subscribe button isn’t shown (for me it just shows the word “Subscribe” but it’s not a button), then change the “Hot/Active/New/etc.” dropdown to a different value. This refreshes the page and the Subscribe button appears.
If the tools for discovering and subscribing to communities could be improved so it becomes dead easy to subscribe to communities on any instance from any instance, that might not need to happen.
Right now the process of having to search for each community and subscribe is too clunky. And if someone posts a link to another community it often comes up in a format that takes you to the other instance, where you have no account so can’t subscribe. We need a way to share links to other communities that incorporates an easy “subscribe” button that talks to your own instance.
It would be nice to have some index or search result page that lists communities on all instances, with a subscribe button next to each.
If these things can be smoothed out, it won’t matter too much which instance you have your account on, so that will be less of an obstacle to new users.
Authoritarian, not authoritative. The 20th century has a lot of history of authoritarian communist regimes, which would be standardly classified as left. It may not be the most appealing version of left politics, and it is just one version of communism, but it is still a version of those things.